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* NOTICES * 

JPO and NCIPI are not responsible for any 
damages caused by the use of this translation. 

1 .This document has been translated by computer. So the translation may not reflect the original 
precisely. 6 
2.**** shows the word which can not be translated. 
3. In the drawings, any words are not translated. 

DETAILED DESCRIPTION 



[Detailed Description of the Invention] 
[0001] 

(Background of invention) 

1. Field of invention Generally this invention relates to cybermoney, an electronic ticket, an electronic 

coupon, an electronic check, a digital ticket, etc. 

[0002] 

Are efficiently [ cheaply and ] producible, this invention - especially - (i) insurance and quickness 
the digital communication network in the world -- leading - distribution -- possible -- (ii) -- it can 
inspect visually by the purchase addressee, and it is physically safe, can convey, and is strong to 
fabrication (in) -- namely, effect -- not winning popularity (however) A network invader, the purchase 
addressee of each digital ticket, and/or the purchase addressee of a large number which participate in 
conspiracy If a certain (iv) purchase addressee desires possibility of fabricating such a digital ticket 
Purchase anonymously, hold, can return and are based on laser scanning of a (v)2-D bar code format 
Popularity is won including being based from a smart card on data reading etc. or easily at the time of 
return Quickly, can verify safely and not a winning popularity return is allowed after (vi) duplex 
receptacle return or a report of all thefts (resistant). It has the versatility incorporating various ratings 
(vn) a move and division -- possible -- self-(viii) authentication -- carrying out -- (ix) -- (x) That 
cancellation is possible or winning popularity return is possible, and it is related with a digital ticket 
healthy on (xi) ecology target. [ be / no physical liquidation (tender) or physical cancellation 
(surrender) ] 
[0003] 

2. Explanation 2.1 of conventional technique General background 2.1.1 General preface The amount of 
the electronic commerce (electronic commerce) in both transaction (transaction) between firms and 
between firm-consumers is increasing dramatically in recent years. Almost all consumers' Internet 
commercial transaction is due to processing by the credit card, and is U.S.Postal Service. United Parcel 
Service Federal Express Or goods are sent to the consumer using general parcel delivery service like 
Airborne Express. Although it is completely rational about physical goods, such as books, Music CD 
and DVD, or same goods, it is thought that use of the physical delivery for the purchase of an abstract 
concept like an access privilege is unsuitable. 
[0004] 

What kind of access privilege is sold on the Internet? It will be movie Star Wars early in May, 1999. : 
The Phantom Menace A ticket becomes available on in TANETSU, and it could purchase with the credit 
card before rather than it was sold by the box office of a movie theater. This is far attractive alternative 
rather than it makes a matrix and stands in a line in advance of public presentation of a popular movie. 
Theater, ballet, a concert, and a sport event are contained in the access privilege of other classes 
currently sold on the Internet. 
[0005] 

In case the ticket of a movie is purchased on the Internet now, a consumer has to acquire a ticket 
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physically, therefore this has functioning [ more ] as a reservation device in a sense. Like the ticket of 
theater or a sport event, if the value and the price of a ticket become high, a ticket will be delivered by 
the consumer by mail in many cases. 
[0006] 

A ticket is a physical body showing the access privilege of single use. Instead of mailing, the artificer of 
this invention distributes such an access privilege electronically with the gestalt of a digital ticket and it 
is sure that he is natural. Since the digital representation of the right contained in a ticket must be'r in / 
an access point ] verifiable with the ticket ticket collector of a theater, as for a ticket, it is desirable for it 
to be able to change into the gestalt which can be conveyed easily physically. In order to perform 
authentication and verification, digital ticket contents can be again digitized from the gestalt printed 
without spending costs easily when reading was possible and it was required, and should contain an 
authentication tag like a digital signature. The digital data inside a digital ticket can be carried to the 
venue of a ticket event by various approaches by the consumer. Store digital data in a flexible disk it is 
stored in a smart card, or can perform printing in the paper etc 
[0007] 

Use of the printed two dimensions bar code is considered to be desirable by the artificer of this invention 

!? °H n n ^° ™i^ i( ? Ue for Which lt was very suitable for di 8 ital ticket Purchase. ItKin and Josephine 
Martell; A PDF417 primer: A guide to understanding second generation bar codes and portable data 
hies; Refer to Technical Report Monograph 8 and Symbol Technologies (April, 1992) Moreover AIM 
Also refer to specification"Uniform Symbology Specification PDF 147." The printed 2-D bar code is 
excellent in the fault tolerance nature of the held data, and re-digitization is easy for it. Thus economical 
initial commercial-scene osmosis is possible for the printed digital ticket, and if a compromise is reached 
in some gestalten of a ticket, and user-friendliness of contents, the hardware foundation structure of the 
consumer who exists at hand can be used. That is, unlike the situation of smart card reader/writer many 
web surfers can access a printer. ' 
[0008] 

2.1.2 Requirements for Internet ticket issue It can also be considered that the Internet ticket is the digital 
representation of an access privilege or capability (capability). These can be consumed at the time of 
use, or can be confirmed over a certain time amount period. For example, it is the relation of the ticket 
of a movie, and the series ticket of film series. Furthermore, generally such a ticket can prepare 
[0009T nt ^ 6Xample ' 3 leCtUfe haS effective movie P ass onl y 5 tim es in the morning. 

Unlike the capability in the conventional capability orientation mold operating system, the capability of 
a digital ticket is not maintained by the kernel of an operating system which performs transmission and 
reading of a ticket. The probably nearest prototype is use of the Amoeba distribution kernel of 
capability, and capability transmits through a network in this case, editor of Sape J.Mullernder • The 
Amoeba distributed operating system: Selected papers 1984-1987; Refer to Centre for Mathematics and 
Computer Science and 1987. However, in the case of an Internet digital ticket, finally a consumer 
carries the generated digital ticket through a "SUNEKA network" (sneaker net) to a movie theater or a 
concert venue. 
[0010] 

It is good to compare with other two electronic commerce methods, the cybermoney, and digital mail 
which have the requirements which were very alike in part in consideration of the functional 
requirements over the Internet ticket. However, depending on a difference of requirements, digital 
designs may completely differ. The following chapters 2.1.3 and 2.1.4 consider cybermoney and digital 
postal-charge sealing. 
[0011] 

2.1.3 Cybermoney Cybermoney is in the electronic commerce method which has many of same 
requirements as a digital ticket. The electronic expression of money has worth of a proper with a certain 
gestalt completely like a digital ticket. T. Okamoto and K.Ohta; Universal electroniccash in Advances in 
Cryptology - Refer to listing and explanation of functional requirements in Crypto'91, pages 324- 
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337;Springer-Verlag, and 1992 which were excellent in cybermonev 
[0012] J ' 

Okamoto and Ohta are summarized as follows as requirements. 

(1) The independence for which the safety of electronic cash does not depend on a certain physical 

(2) Safety which electronic cash cannot create except an issuing bank. Fabrication must be easily 
detectable. Detection being possible and a trace must be possible for duplex receptacle return 

(3) Privacy to which proper use of cybermoney does not expose a consumer's identity 

(4) Off-line-processing possibility that pay, and processing does not need network access and does not 
need a break in of a third person. 

(5) Transferability which can transfer cybermoney among customers. 

(6) Division possibility which can do exchange easily. 
[0013] 

2.1.4 Sealing based on information [ as / in an electronic stamp ] (IBI) Sealing based on information 
gives the one approach of showing having paid the postage on an envelope. U. S.Postal Service- Refer to 
Information Based Indicia Program (IBIP) New Technology Metering Devices (May 1 995) The two 
dimensions bar code (PDF417) which encoded the digital signature for this purpose i's used for IBI 
specification. U. S.Postal Service; Refer to Information Based Indicia Program (IBIP) Indicia 
Specification (July, 1996). Moreover, Stuart Itkin and Josephine Martell; A PDF4 17 primer A guide to 
understanding second generation bar codes and portable data files; Also refer to Technical Report 
Monograph 8 and Symbol Technologies (April, 1992) 
[0014] 

Although the application of a digital postal charge is similar to the Internet circulation digital ticket it 
has caused complication of a solution for the requirement. Here, although the effectiveness of sealing 
must be judged, a digital signature must be verified, it must collate with a master database and a 
duplicate must be prevented, it depends for such duplicate use detection on a distributed database 
Furthermore, since worth of a stamp is low, depending on the case, it has suggested that the direction of 
only the very cheap cure against fraud detection is cost-performance-like. Moreover, **** must be able 
to be printed off-line completely and the need for the communication link in a post office must be able 
to be controlled. For this reason, a mail security device (PSD) will be used. This is a special secure co- 
processor, even when PSD is in a hostile environment potentially, maintains a balance and offers the 
safe method of performing code count. 
[0015] 

Unlike sealing, usually, in a certain physical location which the ticket like a movie theater, a concert 
hall, and a sport arena itself shows, for example, a ticket is made into a target and "is consumed " This 
simplifies the work which detects a duplicate. It is because the need for network construction is 
localized rather than the case of postal-charge sealing. The much more elaborate cure against fraud 
detection is attained at it, so that worth of a ticket is high to coincidence. The interactive property of 
ticket purchase processing required for both statement maintenance of a reserved seat (assigned-seating) 
ticket and a quantity sold can raise the flexibility of a system design 
[0016] 5 ' 

2.1.5 Internet ticket Many of functional requirements over cybermoney do not change a ticket, either. 
Almost all tickets are those (consume) which disappears when used, and division possibility does not 
serve as important requirements. In the case of pass or a concert series ticket, just a simple expiration 
date is enough. 
[0017] 

Ticket It must be able to distribute on-line [ (1) ]. Using a standard web tool like the web browser 
corresponding to SSL, a user has to purchase a ticket and has to receive the distribution. 

(2) It must be insurance. A ticket cannot be created except a publishing agency, but fabrication can be 
detected easily, and a detectable /trace is possible for winning popularity return of a duplex. 

(3) It must be a secret. Proper use of a ticket does not necessarily expose an identity. (This is not the 
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property of Ticketmaster (trademark) or Will Call (trademark) in current.) In order to receive a ticket it 
is because discernment is required. ' 
[0018] 

The requirements for online distribution simplify many fields of a design. Since a ticket publishing 
office must maintain the database of the sold ticket to a seat assignment ticket and the number of tickets 
ol a general entrance ticket must be maintained at worst, the design which is not completely online is 
a so allowed. There may also be superfluous reservation, and for an application like an aircraft ticket 
although it is general, the number of superfluous reservation must still be restricted and managed It is 
because superfluous reservation is not economically healthv 
[0019] 

2.2 Concrete background 2.2.1 Security to the end user who accesses a web server To the conventional 
techmquewhich is related to this invention, they are Axent Techonologies of California Mountain View 
and Inc. There are the system and product which strengthen the security of the end user who accesses ' 
the web server of ["Axent"]. this technique - very much -- relation - it is because a server can publish a 
digital ticket to a customer if a server can identify a customer safely and deep one is [ 1st ] possible also 
tor that reverse. 
[0020] 

However, the still more important comparing point is much more delicate. This invention notes 
enciphering much the amounts of data or the fields in an certain aspect of affairs (juncture) With the 
following paragraph [ 4th ], the amount of encryption and a "message authorization code" show clearly 
that they are some digital tickets in an Axent system. 
[0021] 

In generation and circulation of an encryption ticket, since Axent gives protection with the proper "Web 
Defender" server software, the user could log in to the web server of a large number over between 
companies, and has said that it does not need to enter an additional password each time 
[0022] 

Furthermore, since it is required that Web Defender should provide a networker with the approach of 
pursuing and managing these tickets intensively, a good thing is the name of an individual or a group 
and can control access to company data. It is not necessary to correct a customer's browser during a 
setup. fe 

[0023] 

Web Defender lurks behind the fire wall of a company, and performs collaboration with the web server 
which runs Internet Information Server (IIS) from Microsoft Corporation (Redmond, Washington) this - 
- Microsoft from -- it operates with both Communicator from Internet Explorer and Netscape 
Communications Corporation (Mountain View, California) 
[0024] 

In the setup of Web Defender, the 1st step is acquiring the digital certificate of attestation for an IIS web 
server from a third party certificate station like Verisign and Incorporated (Mountain View California) 
This enables a web server to start a SSL (secure sockets layer) session using a web browser. Next, a 
network manager chooses NT domain and the group to whom access to a Web Defender server is' 
permitted (minding GUI). A group is chosen from NT domain and, subsequently cut and paste is 
performed within Web Defender. It is only only choosing a general ticket issue property, such as making 
a message send to a web browser, once a sign-on process's is successful after that, or carrying out the 
recurrence line of the ticket automatically, once an old ticket's expires 
[0025] ' 

Then, Web Defender software "raises" (pump up) security how. A user acts [ 1st ] as key Inn of the 
name and password which received authentication by the Web Defender server. (It is important to touch 
on that a password and a user's name are on SSL connection, and are exchanged only once during this 
initial authentication) . To the 2nd, a Web Defender server creates a user ticket including some data 
fields like a user's identifier, the shelf-life of a ticket, and a group name. These all specify the data which 
a ticket holder may access. A ticket is applied for the MD5 encryption algorithm which RSA Data 
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Security Incorporated (Redwood City, California) developed, and a message authorization code is 
generated [ 3rd ]. This becomes a part of ticket itself. At this time, a digital ticket is published and it 
memory br0WSer - 0nce a session is com Pleted, a ticket will be deleted from 

[0026] 

2.2.2 Former patent A series of patents of Stefik transferred to Xerox Corporation (Stamford 
Connecticut and et al treat the distribution and use containing a digital ticket (not necessarily limited to 
this) of a valuable digital work piece (work). U.S. Pat. No. 5,71 5,403 SYSTEM FOR CONTROT T mr 
THE DISTRIBUTION AND USE OF DIGITAL WORKS HAVING ATTACHED US^ RfcHTS 
WHERE THE USAGE RIGHTS ARE DEFINED BY A USAGE RIGHTS GR^MMAR^roya^ty^h is 
given to Ae system which controls the distribution and use of a digital work piece to which the royalty 
was attached when specifying according to royalty syntax. U.S. Pat. No. 5 638 443 It is eiven tn « 
SS™ F0R CONTROLLING THE DISTRIBUTION AND USE OF COMPOSITE DIGITAL 
WOKKb (system which controls distribution and use of a decode digital work pieced US Pat Nn 
5,634,012 a SYSTEM FOR CONTROLLING THE DISTRIBUTION AND USE OF dIgI^AL 
WORKS HA VING A FEE REPORTING MECHANISM (a tariff report device > l! is system 
which controls the distribution and use of a digital work piece which it has. And U S Pat No 5 629 980 
!/Af!JoV 0 3 SYSTEM F0R CONTROLLING THE DISTRIBUTION AND USE OF DIGITAL 
WORKS (system which controls distribution and use of a digital work piece). The application 08th 

usTng di^aiT^^^ I HE ™ution an£ use ofdS&vJSScs 

USING DIGITAL TICKETS' (system which controls distribution and use of the digital work niece 
using a digital ticket) which shall be first contained also in this application / No. 344 760 are not 
published as a patent yet. 
[0027] 

These patents have relation in this invention about the property of the security of the system which 
mainly communicates through a network top and this as a background specifically a direct 
confrontation object [in / in use of the "reliance repository" (trusted repositories) in these patents / the 
™„ f nt <*l. system of this invention ] - being out of range . However, this invention does not have 
which is adopted and developed worldwide and is used for billions of ticket issue every month 
and it does not necessarily come from the issue origin with all the same tickets even about the same ' 
event. Therefore, the patent of Xerox shows how the digital ticket issue system and approach of this 
invention are expandable to infinity. v 
[0028] 

All of these patents are related with the system which controls use and distribution of a digital work 
piece. This system makes a royalty accompany the owner of a digital work piece at the work piece of his 
or her. A royalty specifies how I may make each digital work piece use and distribute. The example of a 
royalty is specified using flexible and extensible royalty guidance. Notionally, the right in royalty 
guidance is the label which associated the predetermined behavior and the predetermined conditions 
over the exercise. The behavior of a royalty is materialized in 1 set of predetermined use transaction 
processes. Furthermore, a use transaction process checks all the conditions that must be fulfilled before 
the exercise becomes possible. These use transaction processes require the exercise and specify the 
protocol for performing a right. 
[0029] 

Therefore, the above-mentioned patent is related to the field of the distribution to the work piece 
encoded in digital one, and royalty use. These are inaccurate, and in preventing the distribution and use 
of an electronic publishing material which explanation does not attach, they are dealing with the 
fundamental problem currently faced with publication and the information industry. Including various 
things, usually, an electronic publishing material is distributed with a digital gestalt, and is reproduced 
on the computer system which can reproduce this material. Although these patents have extracted an 
audio and video record, software, books, and a multimedia work piece as an example of electronic 
publishing, they can consider that a digital ticket is also an electronic publishing work piece, and are 
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actually the electronic publishing work pieces of a value fluctuation mold at least 
[0030] 

The patent of Xerox is tackling the problem of safe distribution of the digital work piece by use of a 
reliance repository. The thing in which many of powerful functions of a repository like capacity which 
lends" the digital work piece, or treats commercial reuse of a digital work piece automatically are 
possible is because these are reliance systems, the system is trusted - these - a commercial transaction - 
- fair - and dependability -- it is because the responsibility carried out highly can be taken It is the 
problem of integrity fundamentally that a system can take responsibility ("it can answer") The integrity 
of a repository has three parts, physical integrity, and communications security nature and behavior- 
integrity. 
[0031] 

Physical integrity means the integrity of the physical device itself. Physical integrity is applied to both 
digital work piece a repository and for protection. Therefore, these very thing may have the sensor 
which detects the repository of a high security class when an alteration tends to be performed on those 
insurance cases. In addition to protection of the repository itself, the design of a repository also protects 
access to the contents of a digital work piece. An unreliable system is not made to never carry out direct 
access of the repository to a work piece in contrast with the design of the conventional MAG and the 
optical device like a floppy disk, CD-ROM, and a video tape. The manufacturer of a general purpose 
computer system cannot guarantee that an illegal copy is not created using their platform. A 
manufacturer offers the general function which reads information and writes in, and it depends for the 
synthetic property of the functionality of a general-purpose computer on it. Therefore, a copy program 
can copy the data of arbitration. This copy problem is not necessarily restricted to a general purpose 
computer. This is generated also about an unjust duplicate for amusement "software" like the video by 
the magnetic recording medium, and audio record. These do not have a means to confirm whether as for 
the functionality of a recording apparatus, the copy is permitted also in this case depending on that copy 
capacity. By contrast, a repository can prevent access to the raw data based on a general-purpose device 
and can inspect a copy, and a right and conditions explicit before the other access grant. Only between ' 
reliance repositories, information is accessed with a protocol 
[0032] 

Communications security nature means the integrity of the communication channel between 
repositories. If it says roughly, communications security nature means that a repository cannot be easily 
deceived by what "a lie is told for." The integrity in this case means the thing of a property which it 
communicates with these only when the certification of other devices being the attested repositories can 
be submitted, and a repository supervises a communication link, and detects a "swindler" and malice or 
an accidental interference. Therefore, all the security countermeasures containing encryption, exchange 
of a digital certificate of attestation, and the nuance (nuance) described below are security 
countermeasures aiming at the high-reliability communication link in the world where it turns out that 
there is an actual adversary. 
[0033] 

Behavior-integrity is the integrity in performing a repository. The software which these perform decides 
that a repository carries out. Generally the integrity of software is guaranteed only by the knowledge of 
the source. In other words, although a user trusts the software purchased in the reputable computer 
dealer, he does not trust the software acquired from the random (it is not safe) server on a network. In 
order to maintain behavior-integrity, repository software has received authentication and must make it 
distribute with the certification of such a certificate of attestation, i.e., a digital certificate of attestation. 
It proves that the purpose of a certificate of attestation is attesting it being inspection ending by the 
official-recognition engine, and software performs that it is assumed that it performs software and does 
not spoil the behavior dependability of a repository. Software cannot be installed when the master 
repository which a digital certificate of attestation could not find it within the digital work piece, or 
generated the certificate of attestation is not known by the repository which accepted software 
[0034] 
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All repositories offer 1 set of core services for transmission of a digital work piece. The method of 
exchanging a digital work piece is the base of all the transactions between repositories. The final 
function which these perform in the form of various repositories has a difference. A repository may be 
these the very thing device, or you may also include it in an alien system 
[0035] 

The repository identifier is related with the repository. Usually, a repository identifier is the number of 
the meaning assigned to a repository at the time of manufacture. Moreover, each repository is classified 
as a thing belonging to a specific security class. A certain kind of a communication link and a 
transaction may be subject [ to a repository belonging to a specific security class ]. As a prerequisite of 
operation, a repository needs possession of a discernment certificate of attestation. A discernment 
certificate of attestation is enciphered, an alteration is prevented, and a master repository publishes this 
A master repository plays an official-recognition agent's role, and enables a repository to receive a 
digital work piece. A discernment certificate of attestation must be updated periodically. A discernment 
certificate of attestation is explained in more detail below about a registration transaction. 
[0036] 

A repository has both hardware and a functional operation gestalt. A functional operation gestalt is 
software performed on a hardware operation gestalt in usually. Or a functional operation gestalt can also 
[0037] 6 m 3 hardWarC operatlon 8 estalt like a specified use integrated-circuit (ASIC) chip. 

The hardware operation gestalt of a repository is sealed in safe housing, and when exposed to risk it can 
carry out the disable of the repository. The fundamental component of the hardware operation gestalt of 
a repository contains a processing means, a storage system, a clock, and an external interface. 
[0038] 

Core repository service consists of 1 set of functions which each repository needs. Core repository 
service includes a session initiation transaction. The comprehensive ticket agent who uses in case a 
digital ticket "is punched", and the comprehensive official-recognition server which processes official- 
recognition assignment (authorization specification) also include 1 set of these services. A digital ticket 
and official recognition are concrete devices which control distribution and use of a digital work piece. 
In addition, combining with core repository service describes that they are two or more discernment 
certificates of attestation. In order to enable use of a repository, a discernment certificate of attestation is 
needed. 
[0039] 

The deformation (variant) on this method about a royalty is having a digital ticket apparently. A digital 
ticket agent is shown a ticket and the class is specified on a ticket. But when simple, an attested all- 
inclusive ticket agent available on all repositories "can punch" a ticket. In other cases, a ticket can 
include the addressing information for tracing a "special" ticket agent. Once it punches a ticket, it cannot 
be again used for the transaction of the same class (unless it restores punching so that it may state below, 
i.e., it refreshes). Punching includes inscribing the time stump of the time which the ticket used on a 
ticket. A ticket is a digital work piece, and according to the royalty, it can copy between repositories or it 
can be transferred. 
[0040] 

With a suitable operation gestalt at present, the ticket "punched" punched [ "un-punching" ] namely, 
"will be refreshed", when it copies or extracts. A copy and extract actuation save time as a property of a 
digital ticket. If a ticket is given to a ticket agent, a digital copy can confirm clearly whether it was made 
after it was punched at the end. Of course, the copy or the extract royalty must accompany the digital 
ticket. 
[0041] 

The capability [-izing / a ticket / capability / un-punching ] becomes important in the following cases 

(1) Circulate this by low cost with [ that a digital work piece can be used only at once 1 a limit 
[0042] J 

(2) A digital work piece is circulated with a ticket usable once, and discount is obtained at the time of 
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the purchase of other work pieces. 

(3) Circulate a digital work piece to a future upgrade with an usable ticket (it is contained in a purchase 

price and, probably embedded to the work piece). 

[0043] 

In each in these cases, probably a new owner is not concerned with whether the vender of a copy used 
the work piece but expects that an intact ticket (un-punching) will be obtained, when the paid copy is 
made from the digital work piece (a ticket is included). A ticket should not be revived, when by contrast 
lending a work piece or only transferring it to other repositories 
[0044] F 

2.2.3 Framework of general-purpose digital ticket Ko Fujimura and Yoshiaki Nakjima of NTT 

Information and Communication Systems Labs are tackling the digital ticket. Mr. Fujimura has worked 

out a detailed plan for the flexible digital ticket which makes it a key objective to develop the 

comprehensive value circulation medium which prevents duplex use. In this context, a ticket is a digital 

medium which guarantees the right which the owner of the ticket concerned has. Generally by 

description of a ticket, it becomes possible for a ticket to include the value that a large number differ in a 

single ticket (or the group), and different worth of a class 
[0045] 

Mr. Fujimura claims that a general-purpose ticket framework reduces operation cost in many cases It is 
because a single design can be used in many locations. By becoming common, a ticket can be 
constituted in arbitration and bundling (bundling) and the same feature (feature) can be made possible It 
is claimed that creation of the new business in which he realizes this framework like issue/discharge 
service or deposit box service (deposit box service) was effective 
[0046] 

A general-purpose digital ticket framework must satisfy most requirements for a digital cash There are 
the following in additional requirements. (1) A ticket can control the anonymity, division possibility 
and transferability according to an application. (2) "The machine understanding of each specification of 
a ticket is enabled ', and make possible winning popularity return of a product or service (3) The ticket 
property (for example, paying or reservation status) with which value changes while circulating must be 
changed to insurance. (4) It must correspond to the ticket which consists of more subtickets than one. 

In order to carry out such a framework, the author created the ticket definition language which enables 
assignment of a ticket property. The ticket itself makes possible automation of a state transition and a 
compound possibility feature on the basis of a hypertext. Moreover, a ticket can also include the 
dynamic information which will be updated if the ticket itself is used. As another (obvious availability is 
low) feature, an image and very big data like a sound can be included in a ticket 
[0048] 

Although the ticket itself is originally online (being based on the hypertext, and a dynamic property 
sake), it is possible to also make it circulate off-line using a smart card. In any case a system inspects 
the currency (currency) of a ticket using URI which signed. The semantics of a property and constraint 
in a ticket are specified using a resource description framework. Therefore, the framework to a ticket can 
[0049] P ublisher of a ticket, and can include various constraint in these frameworks. 

Fujimura explained the outline of a ticket reliance model. A publisher's certificate of attestation a user's 
certificate of attestation, and an inspector's certificate of attestation are required for issue, transition 
consumption, or inspection of a ticket, and are specified to the ticket itself using ticket definition 
language. Therefore, each ticket equipped with the public key like a driver's license document can be 
used as a public key certificate of attestation, if a ticket specifies them as a certificate of attestation 
required for a ticket. In other words, all tickets can play a role in the public key foundation structure of 
other tickets. 
[0050] 

Fujimura and Nakajima plan to draft the operation detail and to submit them to a standard engine. The 
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target of their project is what "all web terminals are changed into a ticket issue machine for for all the 
tickets in the world." The same is said of the target of this invention. 

2.2.4 XML ticket : accepted digital ticket definition language There is an activity which formulizes the 
accepted digital ticket definition language with which Nippon Telegraph and Telephone (NTT) takes the 
lead, and is acting, and which is called an "XML ticket." This definition language and the specification 
of this prototype are not contradictory to this invention at all. This invention generates a digital ticket 
safely how, and the digital ticket of the format with this common specification is [ / what should be 
included ] related to whether it returns. 
[0051] 

Ko Fujimura of NTT Information Sharing Platform Laboratories Yoshiaki Nakajima, And Jun Sekine is 
writing that World Wide Web offers the information distribution infrastructure for the digital contents of 
various classes used in everyday life. A digital cash, a micropayment (micropayment), and payment 
infrastructure like an encryption credit card are also established. However, winning popularity return of 
a duplex is prevented and neither the same digital medium as the ticket of paper which enables dealings 
of various rights, nor infrastructure is established yet. 
[0052] 

For this reason, Mr. three of Fujimura, Nakajima, and Sekine is going to develop the accepted digital 
ticket system which can circulate all kinds of right. A digital ticket is a digital medium which guarantees 
a right of a certain kind to a ticket owner, and a software license, a resource access ticket, an event 
ticket, an aircraft ticket, etc. are included. In order to circulate the digital ticket of various classes using a 
common ticket processing system, they have proposed circulating a ticket by interpreting the anonymity 
specified as the ticket itself, transferability, and a ticket property like an approach to return in a general- 
[0053] 6 dl8hal tiCkCt frameW ° rk USing ^ g eneralization ticket definition language based on XML. 

The conventional digital ticket system is developed by each application. However, Mr. three of 
Fujimura, Nakajima, and Sekine is sure that a generalization digital ticket system is required for the 
following reasons. 
[0054] 

(1) Supposing a ticket processing system must develop a system for each applications of each including 
a ticket issue system, ticket Wallet (ticket wallet), and ticket check system, the operation cost of these 
components will become high. For example, it is impractical to develop the system according to 
individual for the application for which only 20 sheets publish a ticket 

[0055] 

(2) It is desirable to manage various tickets using common "ticket Wallet" who had the uniform 
collection view (collected view) like actual physical Wallet, and to store a cache, a credit card, an ID 
card, and various tickets together for a user. 

[0056] 

(3) New network business like cancellation, package-izing, and insurance deposit box service is 
manageable if all tickets are manageable to homogeneity. Probably, it will be difficult to manage such 
business and to store a success, when the format for digital ticket circulation and a protocol are 
dependent on a ticket. 

[0057] 

Mr. three of Fujimura, Nakajima, and Sekine specified the following requirements to generalization 
digital ticket definition language as a result of the investigation to their various physical tickets 
[0058] 

(1) Compound possibility. Language must correspond to the compound ticket which consists of many 
subtickets. Usually, since it is published when a different engine publishes a ticket or they differ, there 
are many cases where a subticket must be published separately from the original ticket 

[0059] 

(2) Status management possibility. Language must be paid and must correspond to the definition of the 
property with which value changes dynamically during circulation like reservation or the 
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acknowledgement status, for example. In addition, enabling these change by the document with a 

signature describes the difficult thing. 

[0060] 

(3) Machine understanding possibility. Language must support the definition of the semantics of a 
ticket. If the service or the task which a ticket guarantees is understood by a purchaser and the vender 
objective before it performs a transaction, the number of dispute resulting from misunderstanding of the 
semantics of a ticket will decrease. 

[0061] 

(4) Effectiveness. Language must be able to do the efficient definition of a ticket. This is because it may 
be stored in other devices with which a smart card or memory was restricted. A data transfer time is also 
taken for a long time, therefore it may not be accepted, so that a definition is long. For example the high 
engine performance is needed for winning popularity return of an event ticket or transportation pass. 

(5) Circulation controllability. Language must prepare a parameter required in order to enable flexible 
circulation control. As shown in Table I, the anonymity of a ticket, transferability, and the approach of 
returning must be specified in a ticket definition. In addition, dealing also with the requirements which 
progressed further is desirable. For example, a ticket can be circulated between the members of the 
group who registered, or it enables it to publish a ticket only at the store judged to be proper. 

[0063] 

(6) Security. The previous researcher has noticed that language must prepare a parameter required in 
order to obtain security. (This invention teaches that an approach and the contents (it is not the language 
showing the contents) of a ticket are what gives security.) A digital ticket system must correspond to the 
facility (facility) which prevents duplex receptacle return like a digital cash system. An online currency 
check system or an alteration-proof device like a smart card, and a digital signature technique are needed 
for this. . 

[0064] 

The researcher adopted the extended markup language, i.e., XML, as a base language of generalization 
digital ticket definition language. It is because they claim satisfying them as the above-mentioned 
requirements are described below. 
[0065] 

(1) Compound possibility. It is required that a compound ticket can be defined using an XML link. It is 
required that the compound ticket with which a subticket circulates on the Internet can be carried out 
easily. Especially this facility is useful when the check in online is required as opposed to the ticket 
canceled in many cases. 

[0066] 

(2) Status management possibility. It is required that the state-transition property of a ticket should be 
defined as homogeneity by attaching a value fluctuation ticket to a constraint assignment imperfect link. 
[0067] 

(3) Machine understanding possibility. The semantics of a ticket is defined using a resource description 
framework (RDF) model, syntax assignment (see the <http://www.w3.org/TR/REC-rdf-syntax>), and a 
resource description framework (RDF) framework (see <http://www.w3.org/TR/REC-rdf-schema>). 
The laminating of these is carried out on XML. This is demanded as simplifying retrieval of the ticket 
on the Internet far. 

[0068] 

(4) Effectiveness. Instead of defining the contents of the ticket itself, it is required by circulating a link 
to contents like the image of a ticket, or the detail of a contract that the size of a ticket should be 
reducible. The link is assumed to offer the newest information naturally on the Internet. For example, an 
event ticket is good to include the link to the location where an event is held, after an event is postponed 
by the reason of a rainfall or others. 

[0069] 

(5) Circulation controllability and security. XML is the comprehensive language designed in order to 
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describe all structured data, therefore can define all parameters required in order to control circulation of 
a ticket. Establishing a control parameter required in order to satisfy these requirements, or a security 
parameter does not have great effect on language as a ticket processing system 
[0070] 

R. D. Brown, "Digital Signatures-for-XML", IETF-Internet-Draft, January 1999; K. Fujimura and Y 
Nakajima,"General-purpose-Digital-Ticket-Framework", 3rd USENIX Workshop-on-Electronic- 
Commerce, Refer to reference for August 1998, pp. 177- 186 

(<http://ww.usemx.org/publications/library/proceedings/ec98/fujimura.htmL Moreover K Fujimura 
of a publication schedule, Hiroshi Kuno, Masayuki Terada, Kazuo Matsuyama, Yasunao Mizuno and 
J.Sekine, Digital Ticket Controlled Digital Ticket Circulation", and Y.Nakajima and K.Fuiimura Also 
refer to non-published manuscript "The XML Ticket Specification". Moreover, refer to XML Schema 
Requirements, The World Wide Web Consortium, Note, and February 1999 (see 

<http://www.w3.org/TR/NOTE-xml-schema-req>). 
[0071] 

As relevance over this invention of these researches, all are applied. About the mode which it generates 
safely it is circulated and returns a digital ticket, there is no objection in expressing the information in a 
ticket (information on others like the geographical site which can further purchase the pattern of ticket 
circulation, and a ticket) in advanced language like XML, and this invention also actually has the D oint 
on which it agrees in it. 
[0072] 

2.3 Digital signature This invention noted adopting the concept of the practice in a digital signature and 
encoding technology. This invention operates completely with the method with which many which 
generate a digital signature differ. 
[0073] 

For example, one side has a public key (N, e) and a private key (N, d), N is k-bit modulus and the 
product of the two bit (k/2) prime factors and e, and d**Zphi(N) * fill ed**lmodphi (N) with a Rivest 
Shamir Aldeman public key cryptosystem (RSA). RSA function f:ZN*->ZN* is defined by f(x) 
=xemodN, and the reverse x-1 :ZN*->ZN* is defined by f-l(y) =ydmodN (x y**ZN*). Here ZN* shows 
relatively the numerical set between 1 which is base thru/or N-l to N. Function f can be used for 
encryption and can use a function f-1 for decode, f is an one direction dropping door (trapdoor one- 
way), roughly, if the assumption generally performed does not know d (or prime factor of N) I hear that 
it is difficult to calculate x=fl (y) from ZN* to y pulled out at random, and it has it 
[0074] 

In the paradigm widely used in order to sign Document M, "hash" y=Hash (M) which exists first is 
calculated and, subsequently to x=f-l(y) =ydmodN, a signature is set. In order to verify that x is the 
signature of M, f(x) =xemodN is calculated and this confirms that it is equal to Hash (M). This 
technique serves as a foundation of some existing criteria 
[0075] 

(Outline of invention) 

Especially this invention is ordered from (1) insurance on a communication network like the Internet 
containing World Wide Web through a communication channel about a digital instrument (although 
externally called the "digital ticket", some of the concept is large), and relates to the digital instrument 
which can be distributed to (2) insurance. Once it distributes to a purchaser, a digital ticket is the 
plaintext and attachment image (and still more nearly another thing.) which displayed on the computer 
screen (in) after that, or were printed preferably. It investigates with the gestalt discussed below, and all 
the persons that possessed the digital ticket a purchaser or after that read the purpose of a digital' ticket 
clearly, check it by looking, and agree on it, and what is kept in mind correctly is made possible By a 
digital ticket carrying out [ (iv) ], by the purchaser, although a compact physical gestalt, the piece of 
paper most generally printed, or frequency is low, it returns to the memory device in which 
transportation like a smart card or a computer disk is possible, a certain rating determined when a digital 
ticket was stored in (v) insurance, and was conveyed to the location (determined when a ticket is 
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distributed first) which it is at a certain time with this physical gestalt and a ticket was purchased - most 
generally it returns for entrance in an event, the time of being repaid for winning popularity return - a 
digital ticket - (vi) - or [ whether it is quick, and effectiveness is judged and verified, without spending 
insurance and costs, and a ticket is just, and an alteration ] - ******** a clear judgment is made 
Moreover, it can also judge [ whether it is repaid for the event with them, and ]. [ there are more same 
tickets or its copies than 1 time, and same 1 
[0076] 

1. Quality of digital ticket by this invention The digital ticket of this invention has high cost- 
performance nature. That is, order, creation, processing, transportation, and liquidation are easy for this 
it is efficient, and does not require costs. 
[0077] 

Especially a part such of a digital ticket is generated in a ticket purchaser's network connection 
computer, and is not mtensive on count. Such count is small Java (trademark) which runs in the browser 
of a consumer s computer usually. It is efficiently realizable with applet. (Although a ticket purchaser's 
network connection computer is usually still more powerful, it does not necessarily meet.) The purchase 
of a digital ticket and transmission are not accompanied by the network communication of a lot of 
information at all. Therefore, the purchase of a digital ticket is usually as quick as processing of 
electronic commerce, or ends more quickly than this 
[0078] 

The purchase of a digital ticket is as easy as processing of all electronic commerce. A purchaser does not 
need to be made to consider a password, a code, and no keys about the order concerned, and does not 
need to keep it in mind. 
[0079] 

That is, cheaply and finally the physical media of a digital ticket can be thrown away. The physical 
media of a digital ticket is a 2-D bar code in usually, and, usually, is most printed by the paper of the 
shape oi a rectangle of the size of a number square inch evenest usually 
[0080] y ' 

Usually the digital ticket of this invention is purchased very quickly, is created, as special thine returns 
and can be carried out. A ticket is the same time lag as any purchase, and is usually generated on the 
Internet. Usually in spite of the elaborateness and the amount (extent) of the information included in a 
digital ticket, it prints easily as a 2-D bar code which a text and graphics accompanied with the graphics 
printer of one which is driven with a user's browser and operating system software of general formats A 
duration is only dozens of seconds. 
[0081] 

As most important thing, it is raised that winning popularity return of a ticket is the wand usually 
connected to the pocket computer (always connecting with a network is even unnecessary) of a ticket 
ticket collector and a porter, and must scan a 2-D bar code. Reading of a ticket is performed at a high 
speed, is essentially errorless at a foolproof (foolproof), and is unrelated to a ticket ticket collector's 
intelligence, industry, or its lack. A ticket ticket collector's computer makes all judgments It sets in a 
situation unusual usual regardless of how a ticket ticket collector's computer functions on a very 
surprising thing, and various information in a digital ticket is decoded. Only by whether for the 
indexation guide to the 2-D bar code of the sold effective ticket to have been printed when and where 
and to have been distributed by the porter before the event It is possible to actually check the 
effectiveness of a digital ticket manually, without using a computer 
[0082] v 
The digital ticket of this invention is safe in many respects. 

The digital ticket is safe in manufacture. The part protected in the code of a just ticket can be created 
only by the ticket manufacturer and the vender in a safe facility. Furthermore, the security of the digital 
ticket in the hand of the purchaser of a ticket is dependent on neither of the physical devices and 
dependent on a code. It is difficult even for impossible level to create an effective digital ticket 
deceitfully in fact. Although the information transmitted in each of the two directions of [ between a 
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ticket consumer / purchaser, and a ticket provider / vender ] is enciphered, the security of a digital ticket 
is based [ not only based on crypt analysis-security but ] also on the physical security of a key called a 
signature key, and this is known by only the ticket manufacturer / vender 
[0083] 

The digital ticket is safe in winning popularity return. Although the unjust duplicate of a just digital 
ticket may also be possible, even the digital ticket first shown only once [ simple ] depending on the 
case can return about the gap, one holding, or the event reserved by actuation of a ticket. It is essentially 
worthless to make the copy of an effective digital ticket. 
[0084] 

The security of a digital ticket can be seen. It includes detecting an inaccurate 2-D bar code most 
preferably by detecting an alteration or an inaccurate digital ticket easily on the inaccurate ticket repaid 
on the display which a computer drives by being near the just 2-D bar code which the specific ticket 
should own if just, and displaying. Such a vision display gives a vision display exact about it being 
considered by those [ both ] that are going to repay a porter and a ticket that a ticket is [ why ] 
inaccurate. 
[0085] 

Purchase and winning popularity return of this invention are the direct transaction of ticket receptacle 
return people and ticket ticket collection human being (by winning popularity, there may be no either or 
both sides of return people and ticket collection people, also when it is the same people as a ticket 
purchaser / consumer, or a ticket manufacturer / vender) between a ticket purchaser / consumer, and a 
ticket manufacturer / vender, and the break in of a third person is completely unnecessary. [ a digital 
ticket ] directions especially with easiest purchaser/consumer of a digital ticket, i.e., (1) ticket, -- 
purchasing ~ (2) ~ what is necessary is just to print it, to understand returning the ticket which carried 
out (3) printings, and to follow it 
[0086] 

Purchase and winning popularity return are anonymously possible for the digital ticket of this invention. 
According to this description, transferring to people from people is also possible. Although a ticket can 
be manufactured anonymously and it can show The original possessor of a ticket or a former possessor 
asserts the theft of a ticket. When this occurrence is notified to the police, more generally from all a 
victim's (it claimed) (of course, the rare copy of the actual ticket made by the victim is included) records 
From the record (responding to all the secret nature of an event of a vender's volition) which has 
alternatively the ticket vender who can hold, it is at the presentation time, the ticket stolen (as claimed) 
can be recognized, and a presentation person can be specified as the police. Even if anything does not 
have a meaning thing in a ticket like the specific seat number clearly as for this it is effective 
[0087] 

When the original purchaser of a ticket wants the identifier of his or her, the address, an identification 
number, etc. to be shown on a ticket on a safe cipher, a plaintext, or both sides although purchase and/or 
winning popularity return can be performed anonymously if the digital ticket of this invention is 
required, or if desirable, this is made easily, and according to a possibility that to be possible will be 
considered by the purchaser, custom-made ** of it was carried out, and it creates the digital ticket which 
loaded data. Actually including data in this way recommends the honest customer "who does not want to 
separate from the body the ticket purchased justly." 
[0088] 

Winning popularity return of the ticket after resulting in an effective understanding of the effectiveness 
of the marketing strategy which divides, it not only adds such population statistical information, but 
divides the time amount and the amount of dollars of ticket sale, and determines a ticket price according 
to the time of ticket purchase which originates when a ticket vender most generally sells a digital ticket 
first on the Internet, although anonymity is completely satisfactory for each ticket holder and user, and 
correlation attachment ****** are also make. Since the move and the re-move are usually easily [at the 
appropriate time ] possible for the digital ticket of this invention at holders, all the rights in the ticket set 
as the object of division can be divided. For example, when only 5 times is effective, five different 
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persons can use a ticket for the film in the morning when a ticket does not specify the date only once 
respectively at the time of day same during the morning, or different time of day. (Winning popularity 
return of a ticket to many events is performed by the network-like computer which memorized partial 
receptacle return of an intact a large number use ticket and a ticket.) 

(Under this invention, it is also instead possible to supervise and control all fields by real-time 
absolutely [ ticket issue and a ticket receptacle return process ] using a computer contrary to the concept 
toat the anonymity of a ticket purchaser / ticket receptacle return people can be saved.) Therefore the 
time amount of a game is telephoned in a football stadium, and those who accessed the data which 
remain on the computer of "Doctor Jones" can also tell what "Dr.Jones goes into the gate E3 at 2 22PM 
and the appointed seat is 43L22". B *.t*rm, 

The price total amount can be repaid without re-owning a digital ticket physically cancellable [ the 

digital ticket of this mvention 1 therefore 

[0089] 

The digital ticket of this invention is supple and various. Even if it can set any one ticket by the 
combination of rating of all requests and shows which one event a ticket (or showing there is also 
nothing), it is uninfluential in case it is behind shown for another event. Much copies may be printed 
when [ in which the paper which printed the purchased ticket was thin and was worn out for use 1 it is 
[00%) ^ 0386 ^ ° Ut (h ° WeVer ' d0n,t retum t0 ^incidence deceitfully.). Refer to above. 

A single use ticket serves as wastepaper of a ticket potentially, without damaging physically in an event 
without no being collected but usually spoiling value. While judging the effectiveness of a digital ticket' 
by a reader s actually letting the printed digital ticket pass, and reading the 2-D bar code by the side of 
the observation The information which printed advertisement or a coupon, and obtained ** after the 
event to the observation side at the induction-time for the ticket holder, For example "Save $4 With 
I his Coupon - The information [ like ] Dine on Pizza at Joe's Pizza Parlor" is distributed The digital 
ticket is ecologically healthy. Clearly, this does not contain plastics, the expensive hologram, and the 
thing of such a property at all. B 
[0091] 

The digital ticket of this invention gives the correctness proof of itself, and if it is required, it is enough 
to also present a court. When a certain man presents a fake ticket (in or the case stolen goods), this can 
be judged immediately. Even if a porter's computer uses the secret cryptographic key, it is not necessary 
to solve this key (for it to be able to set to the legal indication accompanying a criminal action like), and 
to prove that the repaid ticket is a fabrication article. 
[0092] 

On the contrary, when a ticket manufacturer / vender neglects fulfillment of delivery to the just 
purchaser of a ticket of a product [ finishing / an agreement ], this ticket manufacturer / vender can find 
immediately having created the restricted contract completed on all the conditions related when [ most 1 
contained m the data of a digital ticket. A ticket with just ticket manufacturer / vender is a copy when it 
is claimed with a false that it has returned before, this randomness can also be tackled, but when winning 
popularity return of a ticket is interactive, it restricts 
[0093] 

the digital ticket by this invention may be considered in this way - all advantages are almost connoted 
The conditions recognized m relation to the digital ticket by this invention it may judge that is not the ' 
optimal are very few, and do not almost have importance. 
[0094] 

To the 1st, one of those who executes by proxy instead of a ticket consumer or a consumer like a 
commercial ticket seller purchases a digital ticket ordinarily by the Internet. The connection with a 
communication network, especially the connection with the Internet serve as the only practical method 
which obtains a ticket as a matter of fact. 
[0095] 

By the surrogate of the purchaser of a ticket, his, or her, a ticket must be printed, must be stored on a 



http.7/ww4.ipdl.ncipi.go.jp/cgi-bin/tran_web_cgi_ejje 



12/15/2004 



Page 15 of 30 



portability memory medium, or must be stored [ 2nd ] on a smart card. Respectively, the ticket purchaser 
to^own the smart card writer for the computer printer, the disk drive, etc. 

With it being unrelated to there being a lot of [ rating which a ticket gives / 3rd ] monetary value, since a 
purchaser prints a digital ticket, he does not pass in a simple appearance but it is thought that a color is 

mateSlizer ^ ^ ' m3y n0t l0 ° k ex P ensive like the ^ght which it 

[0097] 

the quality and the throughput of whenever [ highest / in / to the 4th / ticket verification, ticket receptacle 
return, and the monitor m the gate ] - the (i) computer - desirable - a network computer and (ii) dkita 
ticket reader - most generally an optical reader is needed. Near the event related to a ticket a location or 
near it power is usually needed. Although it does not become ticket verification and the dependability 
element (senal reliability element) in which it receives and which a single computer and a reader follow 
in a return process, the requirements for fail-safe may arise for the large spectators who are waiting for 
he quick entrance processing to the event by which terrible **** was carried out. The (i) computer and 
(ii) reader hardware to be used are usually reliable, and/or are redundant and prevent that processing of a 
digital ticket stagnates or is overdue. (Probably the repaid ticket should be compared with the ledger of 
the ticket currently printed beforehand sorted with entrance opening of an event, or it should describe 
that it is also possible to enter those who only show a ticket, when having not gained the pocket printer 
and an electronic entrance system break down in addition, although most anticipation visitors to an 
event have a just ticket.) 

the 5th - and finally, by the excuse that the ticket manufacturer / vender is receiving reservation of his 
event superfluously, and a ticket is copied, by the rare case where it is said that entrance of the just 
(digital) ticket holder who arrived later is refused, if winning popularity return of a ticket is performed 
interactively it can be come so much out of this fraud action (digital), and it can be proved from the 
ticket itself For that, it is required for the digital ticket to usually be materialized by the smart card (In 
addition under this ticket issue and a ticket receptacle return procedure, it comments almost on the ' 
ability not to prove definitely about superfluous reservation of the event of a nonreserved seat ) 
2. the digital ticket distribution approach therefore, the voice of this invention -- one [ like ] - a "ticket" 
supplier company - digital one - this invention is materialized in the approach of having computerized 
which can distribute a "ticket" to a "ticket" consumer through a communication channel. 
[U(J9oJ 

A ticket supplier company's computer transmits the data about the incident (occurrence) i e an "event" 
which may have the authorization cut-form called a "ticket" through the communication'channel first to ' 
an anticipation ticket consumer's computer, (i) Generally an incident is an event, generally the (ii) 
communication channel is World Wide Web, and, generally an authorization (iii) cut-form is an entrance 
ticket However the approach of this invention is not necessarily restrained by the application in such (i) 
use, the such (n) communication channel, such (iii) time amount, space, or a property. For example it 
purchases at a store, and carries into works, and digital "ticket" can also be returned for a certain goods. 

However, an anticipation ticket consumer acquires a ticket for the event which specification chose 
decides to become a ticket consumer, and makes the computer of his/her usually generate a number R 
This several R contains (i) random-number component at least. Three steps which pioneer are removed 
[0100] S considered that " tne 3rd antecedent" finally serves as a digital ticket. 

Several R can also be accompanied by including other information, such as criteria over a ticket to pay 
or these, when the (n) consumer's identity, the event which asked for the ticket (iii) and the number of ' 
visitors, and/or (iv) payment are required additionally as an option, being careful - it is necessary to 
include neither of these information (ii)-(iv) in several R, and several R should contain only (i) random- 
number component. It is desirable that that it is completely an option can also admit presentation of 
information of his/hers like subscription of the identifier of the consumer to several R inside (and inside 
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of the digital ticket with which a consumer is provided ultimately), and when not agreeing that a 
[0101] 

Next, a ticket consumer's computer calculates several R one-way function CRUR^i ie Wi, i, a 
of me function with which many which are hard to count backw^rT ^^^R^be^ 
derived from the original hash (R), and are accepted mathematically differ are suffici^tMs^Twav 
2^^iSS2W ? M ^ toc f m « Suitable > Arable. It can be cons de d" at ' 
se" es^s a d^giS dckef ^ ° Ut 2 ^ rem0Va1 ' the " 2nd and, finally it 

[0102] 

Next, this calculated hash (R) is again transmitted to a ticket supplier company's computer through a 
communication channel from a ticket consumer's computer. Additional ticket oSSiMb eitL of 
information (liMiv) can follow on the 2nd transmission of hash (R), ifSSSto? Al ti 2 L 

S ^ t S w y bQ r l ° n 3 ^ Channd (SSL ' -cure'socket S^&l? ^ ^ 
t h ?t^ a u Ck6t Vender S C ° mputer ' 1116 server on Internet and the client computer of 

^R)hZ^Z^X S ^T ing *" br °r r Pr ° gram - H ° WeVer ' k is onlv indispensable £ Zsmit 
if the f approa + ? of ! hls mention. For example, it can imagine distributing the ticket for a set 

actually m fredy - ^ ^ ^ additi ° nal tick6t ° rde ^ data '« S 

[0103] 

A ticket supplier company's computer receives hash (R) and all supplementary ticket ordering data on a 
communication channel. Filling a ticket demand, a ticket supplier company's computer attaches the 
additional information I to hash (R). That is, it becomes like I||hash (R) The information from a ticket 
purchaser is offered, and this additional information I can con'tain that either, ^TTJsZi^ 
suppher company to include such information in a ticket, however - it should annotate - even ?f there is 
neither a seat nor a ticket price, in order to specify at least the specific event which sold the ticket I hear 
that this information I is meaningful to a ticket supplier company, and he has it. The additional 
information I may actually be potential very large 
[0104] e " 

Si til'*? * t e T d iS r illed ^ \ tiCket SUPpHer ^Pany' 8 c °mputer creates still more nearly another 
digital ticket which signed with the signature key s. Only a ticket supplier company understands Ts as 
what what earned out the digital signature to the combination of hash (R) and* ](s, i e 

rZl C ?*T^1 eK ? *? Tf? Sign (S ' I||hash (R » is ^ "^cedent which ca rried Tout 1 s'tep 
removal, i.e the "1st antecedent" which finally becomes a digital ticket. Subsequently the 1st 
antecedent Sign of a digital ticket (s, I||hash (R)) is transmitted to a ticket consumer's computer from a 
ticket supplier company's computer through a communication channel, therefore, this number and Sis 
1 st antecedent Sign (s, I||hash (R)) - both the (i) supplier company and a consumer - being sudden » 
getting down - („) - since the specific event which sold the ticket is specified at least (even if there are 

Z 1 f 3 ' ^v 6 ' TJ' 3 S , UPplier C ° mpany haS a meanin S> ^ he has P ote ntial possib lity (iii) of 
including additional big information potentially, r at least 1 U 

[0105] J 
[0106] 

This number Sign(s, I||hash (R)) ||R is usually composed as a two dimensions bar code of predetermined 
[0107? 15 ^ QR ^ dimensions bar code deification are desirable 

£on k fT;.r S r^ COm ^ ter CaIC , Ula ? S 3 digital tkket from both ** received information (namely, 
Sign (s, I||hash (R))) and the stored information (namely, R), and writes it in the storage which can 
subsequently convey this completed digital ticket Sign(s, I||hash (R)) ||R. 
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[0108] 

If this storage fits the interface so that the digital ticket with which a consumer's computer is stored in 
transportation and the interior may be searched, it is good also as memory of itself If the consumer 
owns this storage, it is good also as a smart card, a magnetic disk, or memory of CD/ROM Although a 
digrtal ticket is stored it is more expensive than the need or a desirable thing, and these device 3s 

2 ToO~ e t0 ****** " d ^ ^ WHiCh * ^ ^ lafge ^7«^*e 

[0109] 

As for a storage, printing by a consumer's computer is desirable as ordinary paper. The ticket of paper 
tZZf^ com P r + ehensiv J ^formation about all information, the specific event which can be offered 
further (in) as an option and a specific specific ticket to (ii) ticket supplier company and/or one 
consumer whom either of the ticket consumers itself can offer as an option as the (i) two dimensions bar 
code and an option for example, the case where a ticket consumer presents the identifier SEK-S 
ticket of paper - („) - this identifier can be printed, usually - coming out - (ii) when the event which 
applies the (i) ticket will except trifles, for example if an identifier is on a ticlitX^S^? 
below although a ticket holder's identity needs to be checked because of use of a ticket - condemnation 

iZt " Ual / ° r 8r °T ] 'u dUpHcate ° r he ' She/ " When ^ ticket is a ^rted, suppose 

tha it is useful. Furthermore, for example, the comprehensive information about an event (iii) can also 

include the seat where the location of an event, time, and a digital ticket are effective, being careful - 

when shown as this information (ii) and (iii) an option, I hear that it must not be regarded as the 

determinisuc information on the effectiveness of a ticket, and justification, and it is. Effectiveness and 

fiif fnd 3 J m 8Cd J (0 '7 d j men s ions b£ tf ^de. The additional information on an option 

(ii) and (in should regard it as the gestalt of useful "help", in order to carry out "it having to hand" 
and/or a classification" of the fact of a certain kind potentially and/or to publish to an inquiry clerk 
(attendant) for both a ticket supplier company and a consumer at the time of improper use of a ticket or 
deceitfu winning popularity return. (When a ticket is used normally and can return without a fraud ' 
action it is required for nobody that all related information should completely pay attention for all of 
this additional information that it is automatically proved and can be printed as an option on a digital 
ticket by computer.) v & 

The approach of this invention progresses to use of a digital ticket by the ticket purchaser in the event 
which specification chose after storing by distribution to the consumer of a digital ticket and the 
purchaser of a digital ticket. 
[0110] 

This needs to repay the digital ticket in [ which can be conveyed ] a storage for entrance in the event 
which conveying the storage which wrote in (i) digital ticket, and which can be conveyed to the event 

Ws Thlh a R^ md ? eciflcation chose ' and Oii) to read perfect digital ticket 

bign(s, I||hash (R)) ||R in the storage which can be conveyed 

[0111] y 

The computer which reads a ticket (event) involves as secretly as a ticket manufacturer's computer (As 
ong as a communication link is suitable, and it is in the situation physically, an event computer and a 
ticket manufacturers computer may be the same even anywhere.) That is, the computer (event) knows 
the digital verification key v of a ticket computer, and the digital verification key v is equivalent to a 
ticket manufacturer's digital signature key s. If digital ticket Sign(s, I||hash (R)) ||R is read, R will be 
extracted and it will use behind, subsequently, Sign (s, I||hash (R)) is decoded using the digital 
verification key v, and I||hash (R) is acquired (although this will be remembered - completely - a 
function -- not but, it is only only the combination of I and hash (R).). Next, a consumer's computer 
newly calculates new hash (R) using the same one-way function as having used before using extracted 
R. It compares with hash (R) which newly (**) calculated decoded hash (R) 
[0112] 

Read Sign(s, I||hash (R)) ||R is decoded by use of the digital verification key v in (1) Sign (s Illhash (R)) 
part, I||hash (R) is obtained, and a digital ticket is a genuine article when hash (R) which carried out (ii) 
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decode is equal to newly (••) calculated hash (R). A digital ticket is fabrication when either of these two 
invalid 0118 18 mi8Sm8 * When (i> deC ° de ° r (2) ^P^ 80118 g° wnmfc a ticket serves as an 

[0113] 

When fulfillmg both conditions, decode which obtains I||hash (R) using the digital verification key v is 
performed. When newly (•*) calculated hash (R) is equal to the same amount as being stored from the 
first m a digital ticket at the time of the distribution for the event which that production and this 
specification chose, A ticket is surely a thing for a proper event (I defines), and must evaluate further 
whether it is that the specific ticket was shown in this way first. When a meaning is shown first the 
contents of the read digital (and it decoded) ticket, as for the holder of a digital ticket, entrance in an 
event is permitted. On the contrary, when a meaning is not shown the read digital ticket such first the 
holder of a digital ticket is usually denied entrance. 

3. Digital ticket distribution system In one with the another mode of this invention, this invention is 
materialized to the system which distributes a digital ticket through a communication network. Probably 
m this mode, it will be good to examine how the functionality of this system is classified It examines 
that what is correctly transmitted that what is correctly performed in each of the computer of a ticket 
consumer and a ticket supplier company, and on a digital communication network 
[0114] 

Several R is calculated to the 1st. the computer of the ticket consumer by whom this system was 
connected to the communication network - containing - (i) - (ii) The one-way function of R is 
calculated [ 2nd ] and hash (R) is generated as ticket ordering data. To the (iii) 1st on a communication 
network The hash(R) ticket ordering data calculated by the 2nd to a ticket supplier company's computer 
as the order of a ticket to the event which specification chose - transmitting - (iv) - to the 1st What 
earned out the digital signature to the combination of hash (R) and Information I, Attachment of R to 
this digital ticket antecedent Sign(s, I||hash (R)) || is calculated to the 3rd. Sign (s, I||hash (R)) - as the 
digital ticket antecedent - receiving - (v) - as a perfect ticket - Sign(s, I||hash (R)) ||R - giving - (vi) - 
- it stores in the storage which can convey perfect digital ticket Sign(s, I||hash (R)) ||R calculated to this 
Jrd l tne J to the 1st. 
[0115] 

A ticket supplier company's computer is also connected to the communication network (i) To the 2nd 
the hash(R) ticket ordering data transmitted the 1st is received from a ticket consumer's computer (ii) ' 
Ihe information I about the right of others which an event or a ticket has is added. What carried out the 
digital signature of hash (R) and Information I which were received to this 2nd [ the ] to the 4th and was 
enciphered, (in) Sign (s, I||hash (R)) is calculated as the digital ticket antecedent. Namely as (iv) the 2nd 
transmission The Sign (s, I||hash (R)) digital ticket antecedent calculated to the 4th is transmitted to a 
ticket consumer's computer through a communication channel 
[0116] 

a communication network - (i) - the 1st - the 1st communication link - carrying out - transmission of 
the beginning a ticket consumer's computer - reception of the 2nd of a ticket supplier company's 
computer -- corresponding - making - (ii) - the 2nd communication link is performed to the 2nd and it 
is made for transmission of the 4th of a ticket supplier company's computer to correspond to reception of 
the beginning a ticket consumer's computer 
[0117] 

4. Digital ticket In one [ still more nearly another ] of the modes of this invention, a ticket consumer 
materializes this invention on a communication network at the digital ticket supplied by bidirectional 
processing with a ticket supplier company. In this mode of this invention, it concentrates [ what is in a 
digital ticket correctly, and ] proper and correctly about which sequence of information actuation and 
exchange leading to these contents. 
[0118] 

A digital ticket is materialized in [ which can be concreteness conveyed containing Sign(s I||hash (R)) 
||R ] a data carrier, (i) R It is a ticket consumer's secret random number, and (ii) hash (R) is a number 
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which is a one-way function of R. I(iii) ||hash (R) It is, attachment, i.e., combination, with hash (R) of 
the information I about the event (or right) which a ticket has. (iv) Sign (s, I||hash (R)) The digital 
signature of the combination with I||hash (R) is carried out to a ticket supplier company's secret 
s^gnanire key s, it enciphers, and (v) Sign(s, l||hash (R)) ||R attaches R to this digital signature code. 

Furmermore, each origin of these mathematical amounts that are in a detail in a digital ticket may be 
described to either ■ (i) ticket supplier company's computer, or (ii) ticket manufacturer's computer The 
digital ticket which the ticket consumer supplied by bidirectional processing with a ticket supplier 
company on the communication network is materialized always in [ which can be concreteness 
conveyed containing Sign(s, I||hash (R)) ||R ] a data carrier. However, the sequence how this number is 
settled in a digital ticket consists of some steps in detail 
[0120] 

It is the number with which R has the origin in a ticket consumer's computer in the beginning 

The hash calculated [ 2nd ] about the one-way function of R, i.e., R, or hash (R) has the origin in a ticket 

consumer's computer. 6 

[0121] 

This number hash (R) is attached to the event (or other tickets) information I in a ticket supplier 

company's computer the 3rd. vv 

To the 4th, this computer of a ticket supplier company also calculates a digital code with a signature 

based on an attached number of digital signature keys s and Sign (s Illhash (R)) 

[0122] 

To the 5th, a ticket consumer's computer attaches several R to the digital code Sign (s, Illhash (R)) with 
[ this ] a signature, and generates Sign(s, I||hash (R)) ||R. " 

[0123] R ° rigin ^ 3 tiCkCt C ° nSUmer ' S com P uter > is a ticket consumer's secret, and is not public. 

The digital signature key s of a ticket supplier company's computer is a ticket supplier company's secret 
and is not public. v J ' 

[0124] 

5. Epitome which this invention simplified - Part I This invention is not unfairly complicated The old 
2nd thru/or especially chapter 4 are not necessarily long. Although the step based on the mathematics of 
the approach of this invention promises to improve from this, it was made to finish it as Chapter 2 
quickly. However, although there is mind that a reader will agree with this invention being accompanied 
by the step based on the exact mathematics which exists clearly by the point in time of this explanation 
the tree being looked for and it wavering in woods," in fact, --********__ j t can not be holding 
correctly why the approach, system, and ticket of this invention offer [ how ] many advantages which 
are safe or all enumerated in Chapter 1 "synthetically" 
[0125] 

Things are examined from this viewpoint. A ticket consumer's computer is generating some of random 
numbers (essentially) known only in itself at first, the one-way function, or the hash This cannot 
generate a ticket supplier company's computer at least at first at the time before winning popularity 
return of a ticket. Although a ticket supplier company's computer can generate this one-way hash 
function only when it has a random number, it does not have this number in an initial state. 
[0126] 

Through a network, from the computer of the consumer who is a generator, a ticket manufacturer's 
computer receives an one-way hash function, and progresses to the processing which cannot generate a 
consumer's computer and which generate a digital signature with a signature. It does not have a 
consumer's computer, although this signature procedure can be performed also in itself if it has the 
secret signature key of a manufacturer's computer. 
[0127] 

Also by those who monitor a part or all of a communications traffic on the network related to a digital 
ticket, I hear that understanding immediately cannot judge both the random number (R in the above- 
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mentioned chapter) of (i) ticket consumer's computer, and the signature key (s in the above-mentioned 

chapter) of (n) ticket manufacturer's computer, and there is 

[0128] 

From a manufacturer's computer, a consumer's computer receives what was now signed by the one-way 
hash function (it transmitted before) of itself through a network, only attaches the original random 
number, and stores complex as a digital ticket 
[0129] 

men returning a ticket first, about how the digital signature of a manufacturer's computer is decoded at 
least, a manufacturer's computer or the computer of a porter with more high possibility has computer 
and secret relation of a manufacturer, and can access a random number first immediately This number is 
a clear text Taking out this random number, a porter's computer reproduces an c^w^fSZ 
next using the knowledge of that digital verification key (v in the above-mentioned chapter) over the 
encryption signature of a ticket manufacturer's computer 
[0130] 

When a ticket is just it has succeeded in decode of signature data. A porter's computer has the one-way 
hash function of the (i) random number and the (ii) random number next. What should this carry out? 
Why do you only re-calculate an one-way hash function on a random number, and compare it with what 

[^lf ^ 8 tiCket iS effeCtiVe Wh6n b ° th fUnCti ° nS are ^ uaL 

Thus, when analysis and explanation are advanced, noticing first does not have information with other 

persons concerned to each person concerned among the generating process of a digital ticket This 

information is hidden by the back of one direction conversion, or encryption. Consequently, to fraud by 

the purchaser, although it is much more important, the capacity to swindle, take or misuse the process of 

other persons concerned of which person concerned is restricted 

[0132] 

To the seller who swindles, in an interesting thing, a purchaser has the resource of the more than which 
only complains, and holds future protection to it. Generally the verification key v of a ticket vender's 
digital signature is known publicly. Therefore, a seller is able to prove owning goods with just him/her 
Although it is only the moderate importance for only participating in an event, the "dual accountability" 
[0133] mVentl ° n S 311(1 is mUch more im P ortant to other safe transactions like money order. 

6. Epitome which this invention simplified - Part II This invention is larger than the detail of the 
embodiment. 

For example, it is not necessary to necessarily regard a random number R as one random number This 
may build in the information about either (i) ticket consumer, the event which is the purpose of (ii) ticket 
purchase or the date of other ratings, a location and/or a name, the price of a ticket (iii) and (iv) and also 
another data, or may combine with these. As for the indispensable concept, several R of net is random 
[0134] ° n 3 tlCket SUppHer com P an y' 11 is onl y not guessed [ include ]. 

Similarly, as an example, one-way hash function hash (R) does not need to be a simple mathematical 
Hash function, and can also make this very thing a code as an example. It can be considered after all 
that a code is the gestalt of ultimate hashing. 
[0135] 

Next, once it turns out that it is larger than the strategy of an embodiment with the only suitable idea of 
this invention as mentioned above, how should he understand the claim of this specification about this 
invention and this mvention? after understanding the above-mentioned 1st and Chapter 4 he considers 
the property of this invention and understands ~ an option further Examine final digital ticket Sign(s 
I||hash (R)) ||R, and this digital ticket is disassembled. It will be expressing with words what the digital 
ticket consisting of correctly by stripping the layer like an onion and going (being mathematics 
similarly). 
[0136] 
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I hear that a digital ticket contains something and the random number which are a clear text and what 

cL L^fnfl^! 1 K° r ^ a , Ce,tain deformation of this invention > wh ^n enciphered, it can' return to a 
clear text immediately by applying a presentation person's cryptographic key). The ticket consumer 
created something [ this ] and this R. However, most typically, by the time ti s amount R of c e£ texts 
is finally first known by the ticket supplier company, usually long time amount passes, and if hS not at 
the presentation time of a digital ticket, it will not be known for usual in an event to holda ticket A 
ticket consumer follows and conceals this random number from all over the world from a ticket vender 
by use of a one-way function hash (R). er 
[0137] 

Next a digital ticket also contains something. That is, it is the information I about an event to hold a 
ticket a least, and mis information I may be guessed and is not safe. The security of a digi a] ^ticket is in 
toe digital signature of both hash (R) and I using the secret signature key s in Sign(s, I||hash R)m 
Although ftis amount is generally usually decipherable to anyone at a plaintext using he open key v 
this cannot be performed without the knowledge of the signature key which is a private key Therefore 
only a ticket vender can make the final antecedent of the digital ticket itself. nererore, 
[0138] 

A porter has a secret relation with a ticket supplier company. When making digital one and a signature 

l^th y ff^ a u RSA aIg ° rithm ' CVen if a P0rter Cannot * his ^unt Art he can 
decode the amount of signatures by use of a public key. In other words, a porter does not need to 

[0139] 1 3 * SUPP com P an y ,s function and does not need to go up on the level. 

In addition, although this is desirable when a ticket manufacturer's verification key is public anyone can 
reproduce me signed amount I and hash, i.e., ticket information, (R). Therefore, the effectiveness of tnT 
ticket for the resale by the original purchaser and final winning popularity return can be judged very 
easily. Of course, no possession of amount-of-data I in a ticket and hash (R) is performed about 
generation of R or Sign (s, I||hash (R)). hash (R) - a one-way function - it is - (i) ticket consumer - a 
source - it is - (n) ticket supplier company - a digital signature - "-- it wraps - having - " - please 
get down and remember having allotted throughout the inside of a digital ticket by the ticket (iii) 
consumer. J v ' 

[0140] 

Moreover, a porter's computer reverses hash (R) and it comments on it that it is not necessary to ask for 
the seed, i.e., R„ either. At the time of digital liquidation, this seed, this R [ i.e., ], is actually given Onlv 
using this seed, i.e., R, a porter's computer performs a one-way function again, and newly generates hash 
(R). It compares with the one-way function which decoded the re-calculated one-way function in order 
[0 14?] | UatC effectlveness 1 invalid nature of 00 digital ticket. 

Thus the digital ticket by this invention is materialized by the digital storage which can be conveyed 
[material ]. Both the 1st sort data, i.e., a purchaser, and the seller of a ticket understand the medium 
from the start, and at least for the vender of a ticket, in order to specify the specific event to which the 
purchaser of a ticket and the ticket were sold, it contains meaningful data. This 1st sort data has the 
property of an index, and by this, relatively, from many ticket purchasers, a ticket vender does being 
based on an identifier etc., and he can specify the purchaser of a chisel and a ticket rather than is 
absolute. This 1st sort data enables usual, however a ticket vender to identify absolutely a specific event 
and the time of day of a ticket. 
[0142] 

Furthermore, an important thing is that a medium also has the 2nd sort data containing the amount by 
which the digital signature was carried out. This is generated by computer in the following sequence 
from the first, (i) It generates as an irreversible function of the random number called "the irreversible 
function made by the 1st time" to the 1st by the purchaser of a ticket at the 1st time and next it 
generates as a digital signature of the irreversible function made by the seller of a ticket the 1st in fii)2 
time, and, subsequently (iii) to the 3rd time, generates in the 3rd by the purchaser of a ticket who 
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completely attaches the same random number. Here, what is contained in continuation (step iWiii) is 

indispensable at the digital ticket of this invention. 

[0143] 

Thus, when it is going to perform winning popularity return of a ticket, the constituted digital ticket 
steps on a phase and judges the effectiveness. First, a random number is taken out. Next, the irreversible 
function which is signed and which was made by the 1st time is decoded, and the irreversible function 
made by the 1st time is reproduced. Next, the irreversible function of this taken-out same random 
number is made again. This newly made irreversible function is called "the irreversible function made 
by the 2nd time." 
[0144] 

(i) The irreversible function made by the 2nd time is equal to the irreversible function made by the 1st 
time, and the ticket is effective when it succeeds in verification and decode of (ii "the data which 
signed"). When the irreversible function made by the 2nd time is not equal to the irreversible function 
made by the 1st time, or when the digital signature of a ticket cannot be verified, a ticket serves as an 
invalid about a specific event at least. 
[0145] 

The mode and attribute of these of this invention and others will become increasingly clear by referring 
to the following drawings and attached specifications. 
(Explanation of a suitable operation gestalt) 

The following operation gestalten and vocabulary with this invention fundamental in Chapter 1 are 
explained. In Chapter 2, it writes in a detail clearly about the design of a digital ticket issue method 
based on the Internet of this invention. In Chapter 3, the ticket issue method with which some are related 
is discussed, and it compares with the technical advantage of the approach of this invention In Chapter 
4, about the amelioration to the digital ticket of this invention, and a digital ticket issue method some 
will be pointed out and it will round off at the last. 
[0146] 

1. Fundamental operation gestalt, vocabulary There are two main operation gestalten in this invention 
(1) Since it fixes to a material medium (that is, it prints on paper), it is the electronic operation gestalt 
(show in drawin g^ and drawing 3 ) fixed to the material medium called equivalent by the writer of these 
formats of the printing implementation gestalt ticket 1 (show in drawing 1 ) which needs only the printer 
which is large available computer-related peripherals and (ii) flexibility disk ticket 2, the CD/ROM 
ticket 3, DVD, a smart card (not shown), or digital money. 
[0147] 

In addition, on these specifications, although the 1st person concerned to a digital ticket is variously 
called in the combination of a manufacturer, a supplier company, a vender, a promoter, servers, or these 
vocabulary, the matter under statement is guaranteed. For example, this person concerned is called "the 
promoter (server)" on the right-hand side of the table of drawing 5 . The same person concerned as this 
or other persons concerned concerning this person concerned may be called a ticket ticket collector or a 
porter. 
[0148] 

On the other hand, 2nd another person concerned to a digital ticket is variously called in the 
combination of a purchaser, a consumer, a customer, a browser, purchasers, or these vocabulary. For 
example, this person concerned is called "the purchaser (browser)" on the left-hand side of the table of 
drawing 5 . The same person concerned as this or other persons concerned holding the digital ticket from 
this person concerned may call it ticket receptacle return people or those who repays a ticket 
[0149] 

Although the 1st person concerned may also be called the "generating person" of a digital ticket by the 
strange thing and the practice, a digital ticket is printed or the 2nd person concerned changes it into a 
material medium by printing or storing. 
[0150] 

In this specification, it will be simple to process all different vocabulary that calls each person concerned 
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with a word processor, and to apply one, or at most two different vocabulary or description for every 
person concerned. However, when done so, it turned out that an understanding of the context in which a 
certain person concerned is working, and this invention of both delicacy is checked. Therefore the 
identifier instead of many is saved. 
[0151] 

2^Digital ticket using paper This invention affected the remarkable existing Internet technique and 
obtained the solution with easy use. ' 
[0152] 

A consumer accesses a browser with a SSL function, trusts it and establishes [ 1st ] encryption and 
authentication connection to a merchant / ticket issue server. In addition, with the operation gestalt by 
suitable printing of the 1st of the digital ticket 1 shown in gj_y_ngj. , the consumer user assumes that a 
printer can be accessed. (Similarly, with the operation gestalt of the 2nd flexible disk of the digital ticket 
2 shown in drawin g 2 , the consumer user has to have the magnetic flexibility disk drive and the 

rn S ZM U f e l ha i t0 h ? v V h % CI ?- R0M drive which can be written in by the operation gestalt of the 3rd 
CD-ROM of the digital ticket 3 shown in drawing 3 .) 

Using the browser of his/her, a consumer connects with the web server of ticket issue service and 
purchases a ticket using a standard payment device like the transaction of a credit card. Most preferably 
a ticket issue server is composed in the gestalt (and a certain attachment text as an option) of a 2-D bar 
code and distributes a ticket to a consumer's browser. Subsequently, in the printing version of the digital 
ticket 1 shown in drawing 1 , it prints as a bar code 1 1. A consumer does not need to arrive a ticket at 
the event hall a little early to reception. The digital ticket 1 of the shape of a printed bar code is only 
shown to a ticket ticket collector, and a ticket ticket collector actually verifies this by the laser scanner. 

1 data ( ° r e< J uivalent DS in the operation gestalt of the flexible disk of the digital ticket 2 or the 
CD-ROM operation gestalt of the digital ticket 3) encoded by the 2-D bar code 1 1 is the core of a ticket 
issue device. In digital postal-charge sealing, i.e., generation of "e-stamp", a server generates an 
encryption digital signature by this invention similarly. This is some ticket data. However even when 
as for the method of this invention, a ticket issue server receives harm unlike postal-charge sealing an 
aggressor cannot take a consumer's ticket but has prepared the additional guarantee that a just consumer 
can be paid to the framework of return [ winning popularity ] of a duplex. The ticket guarantee protocol 
is as follows as an outline is shown in drawing 5 on the whole 
[0154] 

(1) A ticket issue server and a consumer agree about the ticket information I. This information specifies 
[01 1 55T 1OUnt ' 3 l0 ° atl0n ' et °" ° f 3 V6nUe ' and ' USUally ' contains the consecutive numbers of a ticket. 

(2) A customer's browser generates a random number R and sends hash (R) to a server through a 
communication network 5 (typically shown in drawing^ ) (plug-in used with the downloaded Java 
(trademark) program or browser). ((Just to let a communication network 5 be the Internet ) What is 
necessary is) It is here, hash (-) is an irreversible function, and if the powerful computer which carries 
out long duration actuation is used, it will be thought calculative that the decision of (-) from hash (-) is 
possible. However, the decision of (-) from hash (-) is unrealizable by being clearly impractical on 
count. Since all the attempts that that this means meets and are made like exceed sharply usually both 
time amount left behind by rating which the cost of a ticket and a ticket guarantee numbers of times this 
alternative is not realistic. ' 
[0156] 

in addition - and hash (-) is a Hash Function which is equal to a collision further - desirable - several - 
-hash (Rl) of Rl - Rl - several ~ even if it is approaching very much from R2 and is separated only 
from 1 - several - it means not approaching hash (R2) of R2. The mathematical function SHA1 and 
especially MD5 are suitable, and desirable. Although the effectiveness of this desirable collision 
resistance and this effectiveness are related with the fallacy claim of the duplex receptacle return by the 
ticket vender, they are discussed below. However, for now, the security of a digital ticket is rash in it 
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being m the difficulty on count of counting a hash (R) function backward, and must not guess. This 
Hash Function actually acts only in order to protect it from all unjust actuation by the vender of the 
digital ticket considered to be honest, however it may see the noble-mindedness of a final digital ticket 
[0157] 6 

(3) A ticket server / vender attaches the information (i) Existing, signs hash (R) which received, and the 
attached information I using (ii) digital signature key s, sets to Sign (s, I||hash (R)), and returns a 
consumer this (iii) amount of data that signed through the same digital communication network 5. (Here 
it is assumed that x is reproducible from Signature Sign (x) with those who have the knowledge of the 
suitable decode algorithm from a ticket server / vender, and/or a key.) The verification key v and the 
algorithm corresponding to the signature key s are also sometimes usually public. However, a ticket 
consumer / user does not have a means to generate the amount Sign (s, I||hash (R)) signed in digital one 
by many [ other than a ticket vender ], either. 

(4) A consumer/user can add or attach something to the amount of encryption, carrying out a deer and 
this consumer/user attach the same R which was the base of hash (R). (Please remember that it cannot be 
returned, even if a ticket server / vender is never notified of this R but you want to do so.) Amount Sign 
(s, I||hash (R)) ||R becomes a logical digital ticket. 

[0158] 

Preferably, the browser of a consumer/user encodes this value as a 2-D bar code, and, subsequently 
prints it in the usual paper for printers. This is a physical ticket and a consumer/user has to bring this to 
the gate. 
[0159] 

Not only hash (-) is irreversible, but the requirements that it is strong to a collision suggest a delicate 
property. A ticket server suggests what (therefore, a user cannot be entrapped) a false cannot return an 
effective ticket for are irreversible. The only approach the resistance to. a collision can perform winning 
popularity return of a duplex gives the guarantee of addition that it is the case where a user leaks the 
reserve (or by chance [ Intentionally ]) image value R. 
[0160] 

It consists of confirming that winning popularity return of a ticket is the reserve image of a hash value 
with which the R value which checked and encoded that it was a thing to the specific event which the 2- 
D bar code was scanned, the signature was only verified, and Information I repaid the ticket actually 
signed. In addition, a value R is recorded as a proof of the ticket was able to cancel or return 
[0161] 

The digital ticket 1 using the paper as an example is shown in drawing 1 . The plaintext information 12 
and an image 13 are specific for rating which is usually called entrance in the event which is the object 
of a ticket. However, this always comes out so, a certain need is not, and a digital ticket can be made 
without the clear reference which shows that they are the things for "secret pass." In order to prevent 
theft, the just holder of the just ticket of a football game may actually choose that a text or an image do 
not appear at all on a digital ticket. Even if it is missing, it is completely uninfluential to winning 
popularity return of a ticket. 
[0162] 

Furthermore, the digital ticket 1 using paper also shows the field 14 including the information on a 
ticket. A plaintext is sufficient also as this information 14, and'it is read and recognized by the optical 
character reader (OCR). Preferably, it is in a bar code, or this information is repeated and is a two 
dimensions bar code 1 1 like [ it is still more desirable and ] illustration. According to PDF417 or QR 
specification, the printed two dimensions bar code is further much more desirable 
[0163] 

For the requirements that the digital ticket 1 is conveyed to the gate in the paper, I hear that constraint of 
this method must be received and must constitute a return protocol from a single message, and there is. 
Since all verification information (it is (like R of this invention)) is solved at a single step,' what prevents 
that those who scan a ticket claim the fallacy that the ticket was able to return before does not have 
anything. (The opinion of such a fallacy does not necessarily show the malfeasance by any of a ticket 
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vender or ticket receptacle return people.) An employee's porter may enter his friend unjustly and may 
send back the just holder of the stolen seat. However, if a ticket is stored in a smart card, implementation 
of a bidirectional processing protocol is possible. There is the following advantage in use of 
bidirectional processing. Those who scan a ticket can prevent performing the fallacy claim of such early 
ticket receptacle return. It investigates next about this. 
[0164] 

2.1 Disk and digital ticket using smart card The same information as being held at the operation gestalt 
by printing of the digital ticket 1 of this invention shown in drawing 1 and the information beyond it can 
u ^l^ 111 ? ?P eration g estalt like the flexibI e disk 2 shown in drawing 2 . It will be understood that 
other MAG which can convey a class and optical storing media, size and the volume, and area of this 
flexible disk 2 of a large number containing CD-ROM, DVD, and a smart card (not shown) correspond 
mostly. But the physical gestalt of these common knowledge is not separately illustrated like the flexible 
disk 2 of drawin g_2 . It is because such no drawings are completely added to an understanding of this 
[0165] ° n " m ° St mtereSting gCStalt is a Smart card (not shown) from a functional viewpoint. 

By using a smart card as a digital ticket container, as it is the following, those who scan a ticket fabricate 

(framing) and prevention is attained. 

[0166] 

tXST*, f ^f* ^ rand ° m ValuC R °' R1 ' "•' ±e vector of **- l > md is rec l uired as *nding Hashes 

nuJn in n ,,[ ,!?' 7:} (Rn " 1} t0 a ticket server ' A ticket server g ene rates Signature Sign (s and I||h(R0) 
||h(Rl)|| .... ||h(Rr-l)). ' 

[0167] 

A ticket receptacle return protocol acts as follows. 

(1) Those who scan a ticket generate random subset C**Zn so that it mav be set to ICI=n/2 
[0168] 11 

(2) Those who scan generate Signature (C) s using a specific signature key to those who scan and 
entrust challenge selection (challenge selection) by sending this to a smart card 

[0169] 

(3) A smart card verifies Signature Sign (C) and verifies that C contains the element of n/2 of meaning 
correctly. Subsequently, it is **i ** C to those who scan a ticket. : Ri is clarified 

[0170] 

In this protocol, it becomes proof without the room of the counterevidence of duplex receptacle return to 
have the record which contains many rather than the one half of a reserve image, since only one half of a 
random reserve image is clarified. 
[0171] 

Unlike Chaum's cut-and-choose protocol to cybermoney, this invention does not need encoding of 
identity information. A consumer reports physically and has to return a ticket. David Chaum and Amos 
Fiat, And Moni Naor; Untraceable electronic cash; in Advances in Cryptology - Crypto'888 and pages 
200-212; Refer to Springer- Verlag and 1990. (This design decision must be again taken up, when the 
digital ticket of this invention is used for the event or rating which does not need physical presentation ) 
Those (or ticket publisher) who a Hash Function is one strong (and strong in the 2nd reserve image) 
against a collision, and scan a ticket cannot entrap a customer because of duplex receptacle return. 
Commission of the challenge set C of a person to scan is continued from the place which it left, when it 
makes it shown in a smart card that it was in the ticket receptacle return protocol and a protocol is 
interrupted in what kind of reason. 
[0172] 

2. Related system There is related use like generating of some systems relevant to Internet auxiliary 
ticket issue and a coupon. About these systems, it discusses in this chapter 2 and compares with the 
method of this invention. 

2.1 Share authorization code There are some methods of offering service similar to ticket issue. 
Although one of the easiest approaches is already adopted for the transaction of a telephone on the 
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Internet, it is using a secret authorization code as a "reservation number." Such confidential codes are 
memorized or it writes down, and usually, it offers only in order to identify a reservation entry uniquely 
in a commercial database. If a customer arrives, an original credit card and original Photograph ID will 
be required, and he will check in at a hotel, or a physical ticket will be received. Of course when a 
consumer acts as key Inn of the code and operates the automatic gate, use of these codes can also be 
imagined. 
[0173] 

Although such a code can be distributed in a network, using is difficult for it. With the ticket to the 
venue in which large spectators are, if a code is not long, it will become so extensive that no fraction of 
effective codes is accepted. And if a code is long, a user will memorize it or will sense difficulty for 
acting as key Inn proper. 
[0174] 

2.2 ETM ETM is in the existing ticket issue system (around the 2000 time) (<http://www.etm com/>) 
ETM is based on a kiosk. Usually, a consumer goes to the kiosk in the location which it visits frequently 
[ the inside of a grocery store, or others ] by usually, and purchases a ticket by using a credit card A 
ticket is printed by special paper. Access to a ticket is controlled and it is assumed that paper cannot be 
fabricated. The card stock of an airline ticket is controlled similarly. In addition to a direct purchase 
ETM also permits the purchase on the Internet by visiting the website. By the transaction of a credit' 
card, an authorization code is obtained, this is used by the kiosk (adding to presentation of a credit card 
probably), and a ticket comes to hand. This Internet "purchase" is actually one of the approaches of 
reserving a ticket rather than an actual ticket purchase. 

[0175] 

2.3 E-ticket The agent who calls E-Ticket, and the event ticket which <http://www.e-ticket.net/> can 
already (around the 2000 time) receive on the Internet in Japan are sold. Their ticket consists of a data 
image and a purchaser saves it to a flexible disk. A ticket vender prepares the exclusive booth for 
winning popularity return of a ticket in an event site, inspects the electronic ticket stored in the flexible 
disk using the small computer, exchanges the ticket and electronic ticket of paper, or enters a ticket 
holder in a venue only through the exclusive gate. 

[0176] 

Since a ticket transfer medium is a flexible disk, a reading error sometimes occurs. In order to solve 
these problems, E-ticket announced the proposal which permutes a ticket transfer medium by ID tag 
(non-contact smart card). These electronic tickets are easy to copy. As a deterrent, E-ticket requires the 
member registration containing an identifier and a credit card number 
[0177] 

2.4 E-coupon A coupon is a ticket to discount. A certain agent has already (around the 2000 time) 
distributed such a coupon from the website on the Internet. Internet Coupon Service and" 
<http://www.e-coupon.com/> --" "has distributed the coupon which set to a certain store and Liberty 
Production <http://www.autoshowusa.com/>, and has distributed the usable coupon to them, for 
example, can be used for them from their website at International Auto Show 

[0178] 

According to the directions on a web page, a user displays a coupon on a screen and prints this coupon. 
Consequently, a user goes with the printed coupon and receives a certain discount privilege in a store or 
an event site. A coupon is a kind of promotion strategy, therefore is not examined [ as opposed to / 
especially / fabrication ]. 
[0179] 

2.5 Electronic check The electronic check is the same as a ticket or a coupon at the point of encoding a 
single royalty. B. Clifford Neuman and Gennady Medvinsky; Requirements for network payment: The 
netcheque perspective; Refer to in Proceedings of IEEE COMPCON'95 and March 1 995. Here, 
capability is a right which transfers money to receipt people's own account from the check account of a 
checkwriter. Since there was extensive settlement-of-accounts infrastructure in a physical check, it was 
proposed that it would profit by Neuman and Medvinsky in settlement of an electronic check using this 
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infrastructure. Such settlement-of-accounts infrastructure cannot be used for an electronic ticket and 
does not have need, either. ' 
[0180] 

2.6 Ticket data Fujimura And Nakajima inspected the requirements for data encoding of an electronic 
ticket and a coupon. They proposed encoding data using XML and gave the list of ticket properties 
which should be shown This invention and this research can cross at right angles, and two can be 
combined and used. Refer to the chapter of the background of invention of this specification. 

3^ Compatible Hash Function It is not based on the Hash Function which performs the effectiveness of 
this motion, and security m the computer of selection of a random number, and the purchaser of a 
ticket. The mam reasons performed by continuing hashing will remember that it was taking care of a 
purchaser to the conscienceless ticket seller who did sale of the same ticket twice (in digital one). 

However, it is possible to use a specific new method for hashing. This method is the theme of the United 
States patent application to PROBABILISTIC SIGNATURE SCHEME (stochastic signature method) 
for which it applied on February 9, 1998, and was transferred to the same grantee as this invention. 

The purpose of invention of this application is offering a new signature method the about the same as 
the standardized method, easy, and efficient. If it assumes that the Hash Function used as a foundation is 
ideal a safe thing not only can prove the invention approach of related application, but it can prove a 
safe thing in strong semantics. With 1 operation gestalt using RSA, a signature is [ the size of 
verification of a signature ] the size of modulus with 1 time of RSA encryption, and a certain hashing 
with one RSA decode and a certain hashing. According to the statement, with this operation gestalt the 
security of the method of invention of related application is closely related to the security of the RS A 
function itself. Moreover, instruction of this another application is extended and also offers the method 

0f ?! u R ^ bm , s ^ natu J^ which has an Property. That is, such security can be closely connected 

with the difficulty of factoring (factoring). 

[0184] 

The specific new method for this hashing is the theme of said United States patent application for which 
it applied to PROBABILISTIC SIGNATURE SCHEME (probability-theory enemy signature method) 
on February 9, 1 998 and which was transferred to THE REGENTS OF THE UNIVERSITY OF 
CALIFORNIA (University of California director), and is suitable for using in the system of this 
invention. That is, it is well-known to hash Message N on all domain ZN* of a RSA function before 
decode. The signature of M is fl (h (M)), and h is constituted so that the argument may be extended to 
homogeneity at ZN*. According to related application, such a well-known technique is strengthened by 
making hashing stochastic. In order to sign Message M, a signer chooses the random seed r of die length 
kO iirst. k0<k is the parameter of a method here (please remember that it is k=| A N|) Next a signer 
generates image point y=HashPSS(r, M) **ZN* from M and r using the hashing which is a specific 
ap P roa f\ The L n > a S1 g nat ure is x=f-l(y) =yd like usual, mod It is set to N. Verification is still more 
difficult. It is because it is not expectable to be unable to re-calculate the probable hash of M simply but 
to acquire the same value. Verification still requires 1 time of RSA encryption, and only a certain 
hashing. 
[0185] 

The method of this another application claims that it is efficient like the well-known signature method 
based on RSA. Furthermore, it asserts the hashing method of related application that it is also closely 
related to the security of the RSA algorithm itself as mentioned above. It follows, for example when a 
RSA inversion probability is 2-61 from the first (the count resource of a certain amount is used) the 
probability of the fabrication to a signature method becomes low almost equally (the same count 
resource is assumed). 
[0186] 

According to this another related application, the signature accompanied by "message reappearance" is 
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also offered. This technique decreases bandwidth required in order to send the message which signed In 
this technique, Message M and its signature x are not transmitted, but die length transmits the improved 
single signature tau of under |M|+|x|. The verification section reproduces tau to M and checks credibility 
to coincidence. In the case of the security parameter k= 1024, it is claimed that this invention method 
can attest the message to n= 767 bits by transmitting only a total of k bits. When the signature method 
accompanied by message reappearance attained this, a message is appropriately inserted into a signature 
and the verification section enabled it to reproduce it. The effectiveness and security on count are the 
same as the method explained first. 
[0187] 

Thus, in one of the another mode of this of application, it is related with the approach of signing a data 
string. This approach progresses gradually, hashes (a) data string and a seed value, generates s hash 
value, and encodes the given parts of the (b) hash value, a seed value, and a data string at an image 
point, and applies a (c) given decode primitive to an image point, and acquires a data string's digital 
signature. 
[0188] 

the voice of this another application - in other one [ like ], the data string K who has a part for a part for 
part I Ml and part II M2 can be signed, and a data string can be reproduced from Ml and M2 about the 
computer practice which attests this. This approach hashes (a) data string and the random seed r. The 
step which generates hash value h (r, M), and the step which encodes a part for part II M2 of (b) hash 
value h (r, M), the random seed r, and a data string at the image point y, (c) A decode primitive is 
applied to the image point y, and the step which acquires a digital string's digital signature x, and the 
step which relates the (d) digital signature x with a part for a data string's part I Ml are included. 
[0189] 

Therefore, the signature method based on RSA of this another application essentially claims that the 
optimal effectiveness coalesced in the attractive security property. In this method, one suitable signature 
routine needs one RSA decode and a certain hashing, verification needs 1 time of RSA encryption, and a 
certain hashing, and the size of a signature is the size of modulus preferably. When an ideal basic Hash 
Function is given, an only safe thing not only can prove this method, but it has the security which is 
closely related to the security of RSA. In one of the alternative implementation gestalten, all the above- 
mentioned descriptions were maintained, in addition it also has message repeatability. This technique is 
extensible so that the method to the signature based on Rabin or the signature using other one-way 
functions may be given. 
[0190] 

This technique is suitable for using with this invention. However, the digital ticket issue system and 
approach of this invention of not needing such advanced hashing and signature technique are clear. The 
code of this invention is very powerful and it is mainly to have described the hashing and signature 
technique of this another invention and application as an example that it can be completely connected 
with the present front line which progressed most. Although this invention can be materialized to the 
small printing field of cheap paper, it will be understood by the practice person of a code technique that 
the informational elaborate nature and the security which were shown in this way are very large. The 
level, the crypt analysis-security, and others of the security always stirred up in the use in the sy stem of 
this invention and the real world of an approach protect worth of all the tickets it not only will probably 
protect appropriately worth of the single ticket of 100 U.S. dollar extent around 2000, but sold to a 
certain event, and if they be main sport events, it be rare that it can become the what 10 million U.S. 
dollar, either. 
[0191] 

The contents of other applications are given by Regents of the University of California such whose 
access is the common grantee of both this application and another application, so that it shall be 
contained also in this application by this reference and access to it is needed for issue of all patents over 
this application, or all other situations with reference. 
[0192] 



http://www4.ipdl.ncipi.go.jp/cgi-bin/tran_web_cgi_ejje 



12/15/2004 



Page 29 of 30 



4. Conclusion According to this invention, the method which can purchase and distribute a ticket on the 
Internet was taught. An artificer will check these methods, if it is practical and moderate balance is 
obtained between security, consumer accessibility, and facility. For example, the digital ticket by this 
invention satisfies all the requirements for all the classes of various tickets packed into Table 1 of the 
conventional technique of drawing. 4 . the paper by K.Fuhimura to which Table 1 appeared on World 
Wide Web in <http://ww.w3.org/Dsig/signed-XML99 / pp/NTT#xml#ticket.html> (around the 2000 
time), Y.Nakajima, and J.Sekine - " - XML Ticket It adopts from; Generalized Ticket Definition 
Language." 
[0193] 

As for deformation and adaptation-izing of issue of the digital ticket by this invention, and a digital 
ticket, according to the above-mentioned explanation, itself will give the design of communication 
system, and/or the practice person of a code system design technique the hint 
[0194] 

for example, meaningful ~ it can reach and both unnecessary additional information can be attached to a 
digital ticket even by the manufacturer, the purchaser, or the porter, furthermore, an exception - or the 
fact that both the thing by which different information is also coded, and a non-coded thing will appear 
on a digital ticket does not become the radical of the obscuration of an essential principle of this 
invention which carries out a patent claim below 
[0195] 

For example, the digital signature algorithm with which a secret differs from both a public key is 
suitable for the use in the digital ticket of this invention. 

Similarly, it is not indispensable as an example to print a ticket small or to expropriate easily in a 
storage. The digital ticket for charged highway passing is printed in 8 1 / 2 "xl 1 " size, is stuck on the 
aperture of an automobile, and you may enable it to read it by the laser, beam in a non-stopped passing- 
through highway entry tollgate. Or a digital ticket may be loaded in the radio transponder similarly 
asked in case it is going to ride a vehicle into a charged highway. 
[0196] 

Furthermore, as already explained, in itself, a digital ticket can also be called cybermoney, an electronic 
ticket, an electronic coupon, a license, or pass, and does not spoil the essential description aeain 
[0197] 6 ' 

As for the range of this invention, according to possible deformation and adaptation-izing of these of 
this invention, and others, it is natural to determine only according to the following claims and not to 
determine only according to the operation gestalt which taught this invention. 
[Brief Description of the Drawings] 
[Drawing 1] 

Drawing 1 is drawing showing the operation gestalt of the 1st printing paper of the digital ticket by this 

invention. 

[Drawing 2] 

Drawin g^ is drawing showing the operation gestalt of the 2nd flexible disk of the digital ticket by this 

invention. 

[Drawing 3] 

Drawing 3 is drawing showing the operation gestalt of the 3rd CD-ROM of the digital ticket by this 

invention. 

[Drawing 4] 

Drawing_4 is Table 1 of the conventional technique which shows the property of the example of a ticket 
of a concrete class, and the all are suitable for realizing with the digital ticket by this invention already 
shown in draw ing 1 thru/or drawing 3 . 
[Drawing 5] 

Drawing 5 is the mimetic diagram of the table explaining the outline of the protocol by this invention for 
distributing a digital ticket, and the accompanying communication link network. 
[Drawing 6] 
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Drawin g^ is a table explaining the outline of the protocol by this invention for inspecting a digital 

11CK.CL. 



[Translation done.] 
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* NOTICES * 

JPO and NCIPI are not responsible for any 
damages caused by the use of this translation. 

1. This document has been translated by computer. So the translation may not reflect the original 
precisely. to 

2. **** shows the word which can not be translated. 
3. In the drawings, any words are not translated. 



CLAIMS 



[Claim(s)] 

[Claim 1] A ticket supplier company is the computerization approach which can be distributed through a 
communication channel 5 at a ticket consumer about the digital tickets 1, 2, and 3. The digital tickets 1 
2, and 3 are set as the object of return [ winning popularity ] behind. Computerization distribution of 
said digital tickets 1, 2, and 3 and the approach of returning The communication channel 5 is led [ 1st ] 
From a ticket supplier company's computer to an anticipation ticket consumer The 1st digital data Dl 
about the occurrence which can distribute a ticket is transmitted. Said anticipation ticket consumer 
determines to acquire the digital tickets 1, 2, and 3 to said occurrence. In this way, it becomes a ticket 
consumer. Said communication channel is led to the 2nd. The 2nd digital data D2 including the 
directions which expect the ticket for said occurrence to said ticket supplier company's computer from 
said ticket consumer's computer is transmitted. Subsequently It makes it possible to fill said ticket 
demand. In said ticket supplier company's computer By using a private key s, the digital signature of the 
3rd digital data D3 is calculated. This 3rd digital data D3 is a thing about one side or the both sides of 
said 1st digital data Dl and said 2nd digital data D2. The digital signature of said digital data D3 (i) In 
generating of said digital signature, the secret signature key s was used by said ticket supplier company's 
computer, and (n) - one side or the both sides of said digital data Dl and D2 was used about the 
generating It is a thing proving having been stored appropriately in [ which can be conveyed 1 a 
storage, (iii) said digital data Dl and D2 of the object which generated the digital signature of said 
digital data D3 Are based on said ticket supplier company of said specific digital ticket to said specific 
occurrence. It becomes the commemoration (memorialization) of specific supply to said ticket 
consumer. Specify said ticket consumer as a person in the other end of the communication link 
performed through said communication channel at least, and he is identified. Said digital data D3 which 
signed is transmitted to said ticket consumer's computer at least from said ticket supplier company's 
computer through said communication channel the 3rd. To the 1st, by said ticket consumer's computer 
m [ which can be conveyed / said ] a storage Store said digital data D3 which signed at least, and said ' 
storage which can be conveyed is changed into the digital tickets 1, 2, and 3 in this way. said digital 
tickets 1, 2, and 3 with the gestalt of said storage which contains said digital data D3 which signed at 
least and which can be conveyed It conveys to the specific time amount and the specific location where 
the specific occurrence which is the purpose which supplied said digital tickets 1, 2, and 3 is performed 
physically. In order to return a ticket ticket collector in said specific occurrence Said digital tickets 1, 2, 
and 3 are repaid. Said digital data D3 which signed is read to said ticket ticket collector's computer at 
least. In said ticket ticket collector's computer Said digital data D3 is reproduced from said digital data 
D3 which signed, using the digital verification key v corresponding to said ticket supplier company's 
signature key s. In said ticket ticket collector's computer [ whether said digital data D3 can reappear with 
the verification key v, and ] And when it reappears, said digital data D3 is based on said ticket supplier 
company of said 3rd specific digital data D3 for said specific occurrence. It judges whether said specific 
supply to said specific ticket consumer who communicated once through said communication channel is 
memorized correctly. Although said digital tickets 1, 2, and 3 were confirmed and said digital data D3 
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was reproduced by use of said verification key v when having memorized Said reproduced digital data 
D3 is based on said ticket supplier company of said 3rd specific digital data D3 for said specific 
occurrence. The digital ticket computerization distribution which repeals said digital tickets 1 2 and 3 
when said specific supply to said specific ticket consumer who communicated once through said 
communication channel is memorized to incorrectness, and the approach of returning 
[Claim 2] In the digital ticket computerization distribution by claim 1, and the approach of returning 
Said 2nd communication link It is carried out about the 2nd digital data D2 containing the one-way 
function hash of several R (R). This number R Only said ticket consumer's computer is known and said 
^ket supplier company s computer is not known. Said count in said ticket supplier company's computer 
Digital signature Sign about said 3rd digital data D3 including the information I about said event which 

^c^Tf/ 6 ° n ?" fUn ? i ° n ^ Said ticket of hash ( R > & is carried out about I||hash 

S^lw 1 G ^ mCa ^ / S . p r formed about Si*? 1 Hlhaah (R)). Said 1st storing R attached 
ip T a' "k f "ptwM tlckets 1 ' 2 > ^ 3 > ^t is, it is carried out about Signfs, I||hash (R)) 

||R. Reading by said ticket ticket collector's computer It is carried out about Sign(s Illhash (R))\\R The 
reappearance in said ticket ticket collector's computer It is carried out about Illhash (R) hash (R) is 
given, and both R and hash (R) are calculated. Said decision Furthermore, when this re-calculated hash 
(R) is equal to hash (R) to which hash (R) about R was re-calculated and said read digital tickets 1 2 
and 3 reproduced it, When not equal to hash (R) which confirmed said digital tickets 1, 2 and 3 and' 
said read digital tickets 1, 2, and 3 reproduced [ said hash (R) ], The digital ticket computerization 
distribution processed so that said digital tickets 1, 2, and 3 may be repealed, and the approach of 
returning. 

[Claim 3] In digital ticket computerization distribution and the approach of returning according to claim 
I Said decision Furthermore, when a meaning is shown first said read digital tickets 1 2 and 3 When 
said digital tickets 1, 2, and 3 were confirmed and a meaning is not shown first said read'digital tickets 
1, 2, and 3, The digital ticket computerization distribution processed so that said digital tickets 1 2 and 
3 may be repealed, and the approach of returning. ' ' 

t C i a ^o 4] i n digital tick6t com P uterization distribution and the approach of returning according to claim 
1 Said 2nd communication link It is carried out about one-way hash function hash (R) of several R The 
count m said ticket supplier company's computer hash (R) It is carried out about digital signature Sign 
(s, I||hash (R)) about said 3rd digital data D3 including the information I about said event which is the 
purpose which has a one-way function and said ticket. Said 3rd communication link is performed about 
Sign (s, I||hash (R)). Said 1st storing R attached to Sign (s, I||hash (R)) as said digital tickets 1 2 and 3 
That is, it is carried out about Sign(s, I||hash (R)) ||R. Reading by said ticket ticket collector's computer It 
is carried out about Sign(s, I||hash (R)) ||R. The reappearance in said ticket ticket collector's computer It 
is carried out about I||hash (R), hash (R) is given, and both R and hash (R) are calculated. Said decision 
Furthermore, when this re-calculated hash (R) is equal to hash (R) to which hash (R) about R was re- 
calculated and said read digital tickets 1, 2, and 3 reproduced it, When not equal to hash (R) which 

S„™ ed Said di & ital tickets l * 2 > ^ 3 ' 311(1 said read digital tickets 1, 2, and 3 reproduced [ said hash 
(R) J, The digital ticket computerization distribution processed so that said digital tickets 1, 2, and 3 may 
be repealed, and the approach of returning. 

[Claim 5] In digital ticket computerization distribution and the approach of returning according to claim 
4 Said decision Furthermore, when a meaning is shown first said read digital tickets 1 , 2, and 3 When 
said digital tickets 1, 2, and 3 were confirmed and a meaning is not shown first said read'digital tickets 
1, 2, and 3, The digital ticket computerization distribution processed so that said digital tickets 1, 2, and 
3 may be repealed, and the approach of returning. 

[Claim 6] In digital ticket computerization distribution and the approach of returning according to claim 
1 Said count of a digital signature is performed about the digital signature suitable for displaying as a 2- 
D code. The 1st storing using said ticket consumer's computer is the digital ticket computerization 
distribution and the approach of returning by printing of said 2-D code 1 1 to the storage top which can 
be conveyed [ which can be printed ]. 

[Claim 7] It is digital ticket computerization distribution and the approach of returning that said reading 



http://www4.ipdl.ncipi.go jp/cgi-bin/tran_web_cgi_ejje?u=http%3A%2F%2Fwww4.ipdl.... 1 2/1 5/2004 



Page 3 of 8 



by the computer of said ticket ticket collector of said digital signature is performed using an optical 
reader in digital ticket computerization distribution and the approach of returning according to claim 6. 
[Claim 8] A ticket supplier company is the computerization approach which can be distributed through a 
communication channel 5 at a ticket consumer about a digital ticket. The communication channel 5 is 
led [ 1st ]. From a ticket supplier company's computer to an anticipation ticket consumer The data about 
the occurrence which can distribute a ticket are transmitted. Said anticipation ticket consumer It 
determines to acquire the digital ticket to the occurrence which specification chose, and becomes a ticket 
consumer m this way. It sets to said ticket consumer's computer the 1 st. Several R is calculated It sets to 
said ticket consumer's computer the 2nd. The one-way function of said number R is calculated as hash 
(R). Said communication channel 5 is led to the 2nd. From said ticket consumer's computer to said ticket 
supplier company's computer as ticket ordering data Said hash (R) is transmitted at least and 
subsequently it makes it possible to fill said ticket demand. It sets to said ticket supplier company's 
computer the 3rd. The digital signature of hash (R) attached to the information I about said event about 
the signature key s Calculate as Sign (s, I||hash (R)) and this Sign (s, I||hash (R)) constitutes the digital 
ticket antecedent. Said communication channel is led to the 3rd. From said ticket supplier company's 
computer to said ticket consumer's computer Said digital ticket antecedent Sign (s, I||hash (R)) is 
transmitted. It sets to said ticket consumer's computer the 4th. As attachment to said digital ticket 
antecedent Sign of R (s, I||hash (R)) Sign(s, I||hash (R)) ||R is calculated as digital tickets 1, 2, and 3 The 
digital ticket computerization distribution which stores said digital ticket Sign(s, I||hash (R)) ||R in the 
storage which can be conveyed from said ticket consumer's computer the 1st, and the approach of 
returning. 

[Claim 9] Are an approach according to claim 8, and it expands and extends to use of said digital ticket 
by said ticket consumer in the event which said specification chose. After said writing and said approach 
are . Said storage which wrote in said digital tickets 1, 2, and 3 containing Sign(s, I||hash (R)) ||R and 
which can be conveyed It conveys to the event which said specification chose. Said digital tickets 1,2, 
and 3 in [ which can be conveyed / said ] a storage are repaid and verified. The event which said 
specification chose is entered. Sign(s, I||hash (R)) ||R of said digital tickets 1, 2, and 3 is read into an 
event computer, from said read Sign(s, I||hash (R)) ||R Said number R is extracted to said event 
computer. To the 5th, I||hash (R) is calculated using said signature key s and the complementary 
verification key v. It sets to said event computer the 6th. hash (R) is calculated using the same one-way 
function before used in said 2nd count. Subsequently, hash (R) by R and the 6th count is calculated 
hash (R) by said 6th count is compared with the hash (R) part of I||hash (R) by said 5th count. Said 5th 
count is processed correctly and said information I is right to said event. When hash (R) by said 6th 
count is equivalent to hash (R) by count of the 5th of said read digital ticket, [ whether said 5th count is 
correctly processed by permitting the holder of said digital tickets 1, 2, and 3 entrance, and ] Or when 
hash (R) said information I is not right to said event, or according to said 6th count is not equivalent to 
hash (R) by said count of the 5th of said read digital tickets 1, 2, and 3, How to refuse entrance to the 
holder of said digital tickets 1, 2, and 3. 

[Claim 10] In an approach according to claim 9, said 5th count is processed correctly, and said 
information I is right to said event, hash (R) by said 6th count is equivalent to hash (R) by count of the 
5th of said read digital ticket. When a meaning is shown first said read digital tickets 1, 2, and 3, 
[ whether said 5th count is correctly processed by permitting the holder of said digital tickets 1 , 2, and 3 
entrance, and ] Or said information I is not right to said event, or hash (R) by said 6th count is not 
equivalent to hash (R) by said count of the 5th of said read digital tickets 1, 2, and 3. Or the method of 
refusing entrance to the holder of said digital tickets 1, 2, and 3, when a meaning is not shown first said 
read digital tickets 1, 2, and 3. 

[Claim 11] It sets to an approach according to claim 9, and is between said extract and said 5th count. 
How to include storing R in said event computer the 2nd as directions with which said digital tickets 1 
2, and 3 were repaid. ' 
[Claim 12] In an approach according to claim 8 Said ticket supplier company is also a ticket vender, said 
ticket consumer is also a purchaser of a ticket, and distribution to said ticket consumer of said ticket 
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which led said communication channel is accompanied by sale of said digital tickets 1, 2, and 3 Said 
2nd transmission is an approach including the electronic payment suitable for said ordering data 
[Claim 13] In an approach according to claim 8 Said 1st transmission, said 2nd transmission, and said 
3rd transmission are the approach of performing on the communication network 5 which reaches all 
over the world. 

CZll^ f aCC ° r u in f t0 C , laim 8 Said lst ^^sion, said 2nd transmission, and said 

3rd transmission are the approach of performing on the safe communication network 5 of a worldwide 

scale in a code. 

I^SiSf aCC ° r ? in f t0 i laim 14 Said lst ^^ssion, said 2nd transmission, and said 

3rd transmission are the approach of performing on the Internet 

S^n^^r aPI T Ch aCC ° r ? n f t0 C , laim 15 Said lst tiansm ™™> ^id 2nd transmission, and said 
IntemT approach of performing on the secure sockets layer (namely, SSL) of the 

[Claim 1 7] In an approach according to claim 8 It is the approach which then, performs said lst storing 
in the medium which can be conveyed, can distribute to the site of the event which said specification 
chose behind physically, and is repaid by said ticket consumer as digital tickets 1, 2, and 3 to it 
[Claim 18] In an approach according to claim 8 Said lst storing is performed in said medium of the 
printed substrate which can be conveyed. Said printed encryption digital record is an approach which 
then can distribute to the site of the event which said specification chose behind physically and is 
repaid by said ticket consumer as said digital ticket to it. 

[Claim 19] In an approach according to claim 18 Said 1st storing in said medium of a printing substrate 
which can be conveyed is the approach of being the gestalt of a two dimensions bar code 1 1 
[Claim 20] In an approach according to claim 19 Said lst storing in said medium of the printed two 
dimensions bar code 1 1 which can be conveyed is the approach of performing according to PDF417 
specification. 

[Claim 21] In an approach according to claim 19 Said lst storing in said medium of the printed two 
dimensions bar code 1 1 which can be conveyed is the approach of performing according to OR 
specification. 6 v 

[Claim 22] In an approach according to claim 8 The lst storing in said medium which can be conveyed 
is the approach of performing about the computer disks 2 and 3 . 

[Claim 23] In an approach according to claim 8 Said lst storing is performed in said medium of a smart 
card which can be conveyed. Said digital record stored in said smart card is the approach of then 
distributing to the site of the event which said specification chose behind physically, and repaying as 
said digital ticket by said ticket consumer to it. 

[Claim 24] It is the system which distributes a digital ticket on a communication network Ticket 
ordering data is transmitted to a ticket supplier company's computer on said communication network the 
1st To the 1st, on said communication network 5, from said ticket supplier company's computer The 
ticket date by which the digital signature was carried out are received. Since said ticket data by which 
the digital signature was carried out are stored in the storage which can be conveyed A ticket consumer's 
computer linked to said communication network 5, The ticket ordering data transmitted to the 2nd from 
said ticket consumer's computer on said communication network 5 said lst [ the ] is received Said ticket 
data are signed m digital one. In order to transmit said ticket data which signed in digital one to said 
ticket consumer's computer on said communication network 5 the 2nd, A ticket supplier company's 
computer linked to said communication network, To the lst time, said transmission of the lst of said 
ticket consumer's computer It transmits to said reception of the 2nd of said ticket supplier company's 
computer. In order to transmit said transmission of the 4th of said ticket supplier company's computer to 
said reception of the lst of said ticket consumer's computer at the 2nd time System equipped with a 
communication network., 

[Claim 25] In a digital ticket distribution system according to claim 24 Said ticket consumer's computer 
Several R is calculated to the lst. The one-way function of R is calculated and hash (R) is calculated 
[ 2nd ] as ticket data. Said lst transmission It carries out about hash (R) calculated to said 2nd [ the ] as 
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said ticket data. Said 1st reception About hash (R) and the additional information I that it signed in 
digital one using the signature key s It carries out as Sign (s, I||hash (R)). Attachment is calculated [ 3rd 1 
to said digital ticket antecedent Sign of R (s, I||hash (R)). Sign(s, I||hash (R)) ||R is given as a digital 
ticket. Said storing It carries out about digital ticket Sign(s, I||hash (R)) ||R calculated to said 3rd \ the 1 
Said icket supplier company's computer The hash(R) ticket ordering data transmitted to the 2nd said 1st 
[ the I is received. Said ticket data and the digital signature about the additional information I are related 
with the signature key s It calculates as Sign (s, I||hash (R)). Digital ticket distribution system which 
transmits said calculated Sign (s, I||hash (R)) to the 2nd. 

[Claim 26] In a digital ticket distribution system according to claim 25 Said ticket consumer's computer 
is a digital ticket distribution system which stores this by printing said digital ticket 
[Claim 27] In a digital ticket distribution system according to claim 26 Said ticket consumer's computer 
is a digital ticket distribution system which stores this by printing said digital ticket to the pattern which 
can be 2-D machine read. 

[Claim 28] In a digital ticket distribution system according to claim 27 Said ticket consumer's computer 
is a digital ticket distribution system which stores this by printing said digital ticket to the bar code 
pattern which can be 2-D machine read. 

[Claim 29] It is the system which distributes a digital ticket on a communication network Several R is 
calculated to the 1st. The one-way function of R is calculated [ 2nd ]. hash (R) is calculated as ticket 
data, hash (R) calculated said 2nd [ the ] to a ticket supplier company's computer on said communication 
network 5 the 1st It transmits as ticket data for the event which specification chose To the 1st The data 
about the signature key s of hash (R) and the additional information I which signed in digital one It 
receives as Sign (s I||hash (R)). Attachment is calculated [ 3rd ] to said digital ticket antecedent Sign of 
R (s , IJhash (R)). Sign(s, I||hash (R)) ||R is given as a digital ticket. Since digital ticket Sign(s, Illhash 
(R)) ||R calculated to the 1st said 3rd [ the ] is stored in the storage which can be conveyed a ticket 
consumer's computer linked to a communication network 5, The hash(R) ticket data transmitted to the 
2nd from said ticket consumer's computer on said communication network said 1st [ the ] are received 
The data about the signature key s of hash (R) which received to the 4th the 2nd, and Information I 
which signed in digital one are calculated as Sign (s, I||hash (R)). To the 2nd, on said communication 
network 5 In order to transmit Sign (s, I||hash (R)) calculated to said 4th [ the ] to said ticket consumer's 
computer A ticket supplier company's computer linked to said communication network 5 To the 1st 
tune, said transmission of the 1st of said ticket consumer's computer It transmits to said reception of the 
2nd of said ticket supplier company's computer. In order to transmit said transmission of the 4th of said 
ticket supplier company's computer to said reception of the 1st of said ticket consumer's computer at the 
2nd time System equipped with a communication network 5., 

[Claim 30] It is a digital ticket. Digital ticket containing the digital signature of the publisher of a ticket 
which consists of the data carrier which can be conveyed [ material ]. 

[Claim 31] In a digital ticket according to claim 30 said data carrier which can be conveyed [ material ] 
R is said ticket consumer's secret random number including Sign(s, I||hash (R)) ||R. hash (R) is a digital 
ticket which is a digital signature about the signature key s with said ticket supplier company of said 
hash (R) which attached Sign (s, I||hash (R)) to Information I are the one-way function of R and secret 
[Claim 32] It is the digital ticket supplied by the ticket consumer by bidirectional processing with this 
from the ticket supplier company on the communication network. It has the data carrier containing Sign 
(s, I||hash (R)) ||R which can be conveyed [ material ]. R is said ticket consumer's secret random number 
and hash (R) is the one-way function of R. Sign (s, I||hash (R)) The digital ticket which is a digital 
signature about said ticket supplier company's secret signature key s of said hash (R) attached to 
Information I. 

[Claim 33] It is the digital ticket supplied by the ticket consumer by bidirectional processing with a 
ticket supplier company on the communication network. It has the data carrier containing Sign(s Illhash 
(R)) ||R which can be conveyed [ material ]. (1) R It is the number which has the origin in said ticket 
consumer's computer, this - several R (2) several - Sign (s, I||hash (R)) - attaching - several [ this ] - 
Sign (s, I||hash (R)) The data which signed in digital one in said ticket supplier company's computer 
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about a number hash (R) of signature keys s attached to Information I, It calculates as Sign (s, Illhash 
(R)), and transmits to said ticket consumer's computer through said communication network 5 later 
Namely, said number hash (R) In said ticket supplier-company consumer's computer, it is calculated as a 
one-way function of R in itself. It is later transmitted to said ticket supplier company's computer 

T ur e f m Said tick6t consumer 's computer, is said ticket consumer's secret, and is 

not public. Said digital signature key s of said ticket supplier company's computer is said ticket supplier 
company s secret, and is a digital ticket which is not public. 

[Claim 34] It is a digital ticket. It consists of the digital data storage which can be conveyed [ material 1 
Thus digital data storage that can be conveyed [ material ] It is known by both the purchaser of a ticket 
and the vender from the first. The 1st sort data which are meaningful in order to identify relatively at ' 
least the specific event which is the purpose which sold said ticket for the vender of said ticket The 2nd 
sort data containing the digital representation with a signature of the specific parameter which the 
computer generated one by one from the first are included. To the 1st, by the purchaser of said ticket As 
an irreversible function of the random number called "the irreversible function made first", subsequently 
By the vender of said ticket, as a digital signature of the irreversible function made by the 2nd at said 
beginning subsequently The purchaser of said ticket attaches the same random number to the 3rd In 
order for said ticket to win popularity and to judge the effectiveness of said digital ticket at the time of 
return trial Said random number is taken out. The irreversible function made by said the 1st time which 
signed is interpreted. The irreversible function made by the 1st time of this is reproduced The 
irreversible function of the same thing as said taken-out random number is newly made again this - the 
newly made irreversible function - "the irreversible function made by the 2nd time" and a call - When 
the irreversible function made by said the 2nd time is equal to the irreversible function made by said the 
1st time. Said ticket is a digital ticket which repeals said digital ticket to said specific event at least when 
it is not invalid and the irreversible function made by said the 2nd time is not equal to the irreversible 
function made by said the 1st time. 

[Claim 35] The digital ticket performed for the statistical purpose in order to judge whether they are 
whether the digital ticket to which the comparison with the database of the digital ticket which it was 
further actually signed and was sold in the digital ticket according to claim 34 in said digital signature in 
said material medium which the digital reader read was repaid is effective, and an invalid 
[Claim 36] The digital ticket whose digital signature in said material medium is visible in a digital ticket 
according to claim 34. 6 

[Claim 37] In a digital ticket according to claim 34 The digital signature which is visible to said eye is a 
digital ticket which judges whether the repaid digital ticket is effective or invalid by [ of the digital ticket 
which it was actually signed and was sold by the eye ] performing the comparison with the catalog of a 
detectable expression visually. 5 
[Claim 38] It is the system which distributes a digital ticket to the purchaser of a ticket from a ticket 
vender. It is communication channel. To the 1st time, from a ticket vender to the purchaser of a ticket It 
is delivery about the data about an event to have a ticket. To the 2nd time A number of irreversible data 
representation determined as said ticket vender only by the purchaser of said ticket from the purchaser of 
said ticket Delivery, The digital signature of said irreversible conversion from said ticket vender to the 
purchaser of said ticket at the 3rd time Delivery, The communication channel which manufactures a 
digital ticket for the digital signature which said irreversible conversion received combining said 
number, Connect with said communication channel in the state of a communication link, and the number 
of (i) above is determined, (ii) The computer of the purchaser of a ticket who calculates said irreversible 
conversion and creates a digital ticket for said (iii) irreversible conversion combining said number 
Connect with said communication channel in the state of a communication link, and it is related with the 
irreversible conversion received from said purchaser. The computer of the ticket vender who calculates 
the digital signature of this irreversible conversion, Connect with said purchaser's computer and said 
digital ticket is stored. A digital ticket distribution system equipped with the material portable medium 
for conveying this digital ticket to the physical site of the event which the specification which can use it 
for entrance chose. 
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[Claim 39] It is the system by which said communication channel sends a random number to the 2nd 
time in a system according to claim 38. 

[Claim 40] It is the system which sends the number showing the event from which said specification 
chose said communication channel as the 2nd time in the system according to claim 38 
[Claim 41] It sets to a system according to claim 38, and is said communication channel System 
equipped with the digital communication network of a worldwide scale 

[Claim 42] It is a system equipped with the digital communication network where said communication 
channel is safe for a worldwide scale in a system according to claim 38 

[Claim 43] It is the system by which said digital data storing concreteness portable medium consists of a 
computer disk in a system according to claim 38. 

[Claim 44] It is the system by which said digital data storing concreteness portable medium consists of 
print media in a system according to claim 38. 

[Claim 45] The printing ticket support index that it is a printing ticket support index and it is 
characterized by including the 2-D bar code which can judge the justification of said ticket and which 
includes all required information absolutely even if this index is not a meaning. 
[Claim 46] It is the printing ticket support index characterized by including the data with which said 2-D 
bar code-like index was further signed by the supplier company of said ticket in digital one in the 
printing ticket support index according to claim 45. 

[Claim 47] It is the printing ticket support index characterized by including a number of one-way 
functions with which said 2-D bar code-like index is given by the holder of said ticket in a printing 
ticket support index according to claim 45. 

[Claim 48] In a printing ticket support index according to claim 45 further said 2-D bar code-like index 
Sign(s, I||hash (R)) ||R is included. (1) R It is the number which has the origin in said ticket consumer's 
rfl^ 7 several R ( 2 ) severa l - Sign (s, I||hash (R)) - attaching - several [ this ] - Sign (s 
I||hash (R)) In the computer of the supplier company of said ticket, it is calculated as a digital signature 
about a number hash (R) of digital signature keys s combined with Information I. It transmits to said 
ticket consumer's computer through said communication network after . Said number hash (R) Itself In 
said ticket supplier-company consumer's computer It is calculated as a one-way function of R and is 
later transmitted to said ticket supplier company's computer. Number R It has the origin in said ticket 
consumer's computer, is said ticket consumer's secret, and is not public. Said digital signature key s of 
said ticket supplier company's computer The printing ticket support index which is said ticket supplier 
company's secret and is characterized by what is not public. 

[Claim 49] It is the communication system which sells and distributes a digital ticket, (i) One direction 
conversion of a secret number to a vender's computer at the 1st time Delivery, (ii) To the 3rd time 
information with a signature is received from said ticket vender's computer. Said received encryption 
signature information to the 4th (iii) time with said secret number The computer of the purchaser of a 
ticket who stores in a digital store, (i) To the 1st time, one direction conversion of said private key from 
said vender's computer is received, (ii) This one direction conversion and additional information are 
signed at the 2nd time. Said 1st conversion and additional information that it signed, to the 3rd (iii) time 
as information that it signs A ticket seller's computer sent to the computer of the purchaser of said ticket 
It has the digital store which stores in the 4th time said information that it signs and said secret number ' 
as a digital ticket, (i) When reading said information that it signs, (ii) When decoding said information ' 
that it signs and reproducing one direction conversion of said secret number, When reproducing again 
the 1st same safe conversion as said vender used for the 1st safe conversion of said number, (iii) and (iv) 
~ the communication system which can attain effectiveness decision of said digital ticket when 
comparing said decoded reappearance one direction conversion with said 1st reproduced conversion. 
[Claim 50] It is the approach of selling and distributing a digital ticket. As the 1st time To a ticket 
vender's computer, set one direction conversion of a secret number as the 1st transmission from the 
computer of the purchaser of a ticket, and one direction conversion of said secret number is set to said 
ticket seller's computer as delivery and the 1st time. It receives as the 1st reception. As the 2nd time, 
said one direction information and additional information are signed in said ticket vender's computer. As 
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the 3rd time To the computer of the purchaser of said ticket, from said ticket vender's computer, as 
information that it signs Considering said 1st conversion and additional information that it signed, as the 
2nd transmission, it is delivery. As the 3rd time, said information that it signs is set to the computer of 
the purchaser of said ticket. It receives as the 2nd reception. The information that it signs and the (ii) 
aforementioned secret number which carried out the (i) aforementioned reception are stored in a digital 
memory store, using the computer of the purchaser of said ticket as the 4th time. As the 4th time Said 
information that it signs and said secret number are stored in said digital memory store as a digital ticket 
(l) When reading said information that it signs, (ii) When decoding said information that it signs and 
reproducing one direction conversion of said secret number, When reproducing again to the 1st safe 
conversion of said number using the 1st safe conversion of same 45 as said vender used, (iii) and (iv) - 
the approach that effectiveness decision of said digital ticket can be attained when comparing said 
decoded reappearance one direction conversion with said 1st reproduced conversion. 
[Claim 51] In the communication system which has the computer of the purchaser of a ticket who 
performs two-way communication to a ticket seller's safe computer through a non-insurance digital 
communication network It is the approach of selling and distributing a digital ticket to the purchaser of a 
ticket from a ticket seller. As the 1st time The 1st data about the event which is the purpose which has a 
ticket from said ticket seller's computer to the computer of the purchaser of said ticket is sent as the 1st 
transmission through said communication network. Subsequently As the 2nd time Said communication 
network is led. From said ticket seller's computer The 2nd data which identifies the event which asks for 
a ticket to the computer of the purchaser of said ticket as the 2nd transmission to delivery and said 2nd 
data It is determined by only the ticket purchaser and the 1st safe conversion of the number which is not 
known is made to accompany the person of others including said ticket vender. Said communication 
network is led. From said ticket seller's computer The 3rd data which checks issue of the ticket to the 
event which asks for said ticket to the computer of the purchaser of said ticket as the 3rd transmission to 
delivery and this 3rd data The 2nd safe conversion of said 1st safe conversion is made to accompany. 
The computer of the purchaser of said ticket is used, the inside of the material portable medium of 
digital data storage - (ii) ~ (i) accompanied by said 2nd safe conversion ~ said number ~ storing -- (i) - 
- at the time of transportation to the physical site of said event of said digital data storing medium (ii) by 
use of the 1st same safe conversion as said purchaser used When reading said number into a computer 
and reproducing the 1st safe conversion of said number again, It reaches, (iii) When the event computer 
which has the privilege of getting to know said 2nd conversion reverses said 2nd safe conversion, (ii) 
How to enable effectiveness decision of said digital ticket as compared with the 1st conversion which 
reproduced the 1st conversion of which reading playback was done by performing said (iii) 2nd 
conversion conversely. 

[Claim 52] It is the approach of performing about said 2nd data accompanied by the 1st conversion with 
the gestalt of the one-way hash function of said number safe for said 2nd transmission in an approach 
according to claim 51. 

[Claim 53] It is the approach of performing about said 2nd data accompanied by conversion with the 
gestalt of the digital signature of said 1st safe conversion safe for said 3rd transmission in an approach 
according to claim 51. 

[Claim 54] It is the approach storing into the material portable medium of digital data storage consists of 
printing in an approach according to claim 51. 

[Claim 55] It is the approach of performing said printing at least in an approach according to claim 5 1 
about said 2nd safe conversion of the gestalt of the (ii) two dimensions bar code. 



[Translation done.] 
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6t-c >3->rvY ( i ) ttwtrs. 
•frvY (1) tt. aft. Mft#ttKKftWIL;fc2- 
DA-3-F (1 1) ©^88©^«fcgi>r£x-*&# 
ft. *«V»tt«R*©lJiltt7V**. CD-ROMS 

^yKt»4t6l:tt, tUMWftRfeBftU hash 

5. aji*nfc-9— if^fcH-r«*WB*ha»h(R)icaai 

U *©»*tff«U Slgn(s,Ihub<R))£!IMMri38 
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SB, ££Zftasli00*ff31'SC£l?J:?T. iftSESff 
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ccstooHnsy 



-ffTfeOT6CnS0>**©-fflSEK. *IE, B20. 





( 3 ) H#gc2 0 0 3 -50 1 7 1 2 

ttiUnT^SEtSSSEfrSrx-f vi-- f^yh 1,2,3 d^&L, 

• x-* Da&^frJ; 5 ^Mffi^iiipIlgfEtg^^O^^T-, l!uf2xV^*A" x 

- x^y h l , 2 % 3 £#i£L , 

s Sdft^-fS xV >W^SE«tv £ffli^T, -fcL-CltfflESi&Lfcx-f W >v- *? 

— ^D 3 ^b, (tufExV /u- x— * Dj£|??&L , 

• r-^D 3 ^ ( mlfS^^Wffi^^W/cfeWStE^^O^S fr^^- x-* 
DsO^IBf- -iry H ffc«&3S#KJ:5, BfJEiiffx^^/u^iiCT-Sii^fLfcHtf 

mLXl^Z>m&, iiufExV v^yu- x^:y h 1 , 2 , 3 £&%)Xib?>k L, MIS 
xVv^vu- x-^DjiSffirfetfeSEiiv ofjfltiotSSS HufEfim 
£ tifcxV v^/w x-*D 3 #, mm&fe<niii&m(Dtzfr(Dmm¥f%.<D%3 x 

»£\ WfBxV v^/u- x ^ 7 H 1 > 2 , 3 -fs , 



( 5 ) <&m 0 0 3 -50 1 7 1 2 

MfE^-Jry h ^ItO^ > k° a. jolt 5 H-Uli , hash(R) © — # |6| Bfl ft 
f?3 x-f ^- x — * D 3 {^ig-f 5 A-#£sign(s,l| |hash(R) ) lio^ 

HNf2^3 Wilffli, sign(s,l| |hash(R) )^o^t frfrtl, 

9(MK8l <7>te*rtl3, fl&IExV ^^/^ f^^M> 2, 3Ht©, Sign(s,I 
| |hash(R))i^^^L tzR , IP*,, Sign(s,l||hash(R)) MRfco^TfTfrtl, 
mUfrv Y *tL«<Z)= Vt'a ^©fc^Stfl (2, sign(s, I| |hash(R) ) | |R 

itufExxy h £*L#0>=j V M° ^ l| |hash(R)^o^Tff;b 

*l, hash(R)£^;t , R 33 «fc T>*hash(R)^&- M , 

SufE&^Ji, Mi-. R K§ai-5hash(R)£SH-gL, fH*L fchash(R)^jiu 
fEtjc^EtoTcxV i/?)U> ^^ryh 1,2, 3 <Dn$lL 7thash(R)I^L 
, itufExV S S9 >\" f^ryU , 2, SSrW^jiL, BifiEhash(R)# Hufei^^© 
f^yH, 2, 3 (DS^L fchash(R) (c^L < V^J<£\ tff 
§Ex> t** f^ry h 1 , 2 , 3 -t*5 X 0 MJl-f 5 , 

[ »*9C5 ] W*qi4 fE*c©xV /u- f^yh • = yfa ft Eft 

itufE&^fi, Ml-, ^ESK^Ko ycrV v 5 *^- f^r^h 1,2,3 
— *i7i:l§£\ BufExV >^ /i" 2, 3£;£3b<hL, itufE 

It^^o/cxV S^/U- =fTy h 1 , 2 , 3 flSfiSOIw — jg^&j^S 
^i§£\ mlfExV v 5 * /l" f^ry h 1 , 2 , 3 &m$)t i~^>Xo MSI" -5 , 



( 7 ) #162 003 -5 01712 

^'TV Y 5fcfT4fcSign(s, I| |hash(R))^©S&{t£ L "C\ Sign(s, 1 1 |hash{R) ) | |r£ 

^1 iutex-Y i/9 fr- f-fry Y Sign(s,l| |hash(R)) | |r£, fufE^^yh 

t£KL, fli2## &^tf>& % itufE^&fi, H(-> 

Sign(s,l| |hash(R)) | |r£ "a tf SuEtM v^I" f^yH, 2, 3 £ & 

iulExV jV' f-fry Y 1 , 2 , 3 CDSign(s,l| |hash(R)) | |r£-T h> • 
HUfS^«V-iiA//'csign(s, l| |hash(R) ) | Ir^*^ > jWIEfcR £ WC^ h • = ^ 

fcJB^fcrai:-:£|6lH»£ffl^-<\ hash(R)£ML , ft^T-R *5J: t>*^6 Wit 
HfcJ: 3hash(R)£r Jfc* % 

MI5^6 Wff-gt;:J;3hash(R)£iifJiEfS5 OfUJfcJ: 6 l| |hash(R) Whash(R)g|5 

iftfEi?5 <Df+g/JSjEL< S&Jl^ti, «rfBffl«I Ji*lKrlE-f l:^LTIL< 

©H-33E{-J:*hash(R)^*aS-t-5 4i'g-, JlfllEx-f S?* /U- f^ryU, 2,3© 

shW^li&fE&^IftofcT-f v^/U- f-^rs/ h 1 „ 2 , 3 tf>iffi§Efl5 ©tfj?£J: 
S hash Win fB3Lfc^J&£\ fuE7V 4" f^yhl, 2, 3 



( 9 ) #3<2 0 0 3 -50 1 7 1 2 

Bu?emi (oiift, Mfe^2 <D&it , umm%3 (Dmm\$. ^y^-^^h 

[ »#Jll 6 ] W#JSl 5 M^&tCfc^T, 
<d±*=lT ■ ytr-yh - gp*>s s D ±xft? , 

I it # ill 9 ] SffjftJgl 8 fE«©^ffifi*3^T, 

1 (DltmxhZ , ;£jfc 0 

[ 11*312 0 ] »#Jgl 9 IBfJO^ffiKfel^T, 

, P DF 4 1 7 SM&fcL fc#o-CfT9 , 

^xno s um 0 



(11) 4^2 0 0 3 -50 1 7 1 2 

!C X R©-*|6jH«:S:H-iJLT, f • 7 s — & t L "Chash(R)£r 

{R)tOl/^tffV\ 

mmWil <D&mt*. W&ms ^fflKf^ S^/uWKS£Lfchash(R)*5.fctf 
ii AD ftfll I t-o^T, sign(s,l| |hash(R))t L Tt?l\ 

»3 fc, R ©tfrfE7*>f itfijU- fry V fcfT«teign<s,l||hash(R))^S&tt*ft 
ULT, Sign(s,l| |hash(R)) | |r£x-< fr- f^yFHt^t, iftsE&Irt 
W\ SufE^3 tttlLfc^i?^;!/' f-^-y h Sign(s,l| |hash(R)) ||R^oV>T 
f? V\ 

312 fjfE^l {Ci£ff LfchashtRjf 1 ^^ h ISf-^ * Sft U , 

I^ILt, Sign (s, 1 1 |hash(R) )t L TftHL „ 

H2 CI, HufEff^L fcsign(s,l| |hash(R) )£ri2Hf , 

( l*#JS2 6 ] »*5I2 5 E«cOxV S**;u- *j->ry h £{& r A fcfc 

I !f^Jl2 7 J Ij?#Jl2 6 te«Ox^ v 1 *^- 3-*ryY IHff i/^r Atcfc 

• ffry b ffifg ri„ 

[ IS*52 8 ] 19*312 7 fE®©T-f v^/U- h m&i'XT&lZtS 

WLMz-m = — k • /^-y(cppjsij-r-5r t mot, rti^te^-r 



(13) 4$S2 00 3 -5 0 1 7 1 2 

74 S J9 fr- 7>T-y Y o 

[ »*^3 l ] »3fc3l3 o lEi^rV f^yh Kifct^T, ituEW 

^ii^iEr'-* lEfgjfcttli* Sign(s,l||hash<R)) | |r££3k R fi UfMK * 
h ?BS#OSf?B<DiL»T?S>»J , hash(R)ttR © — #|pjM&-?fc»J % Sign(s,l| |has 
h(R))li, flf$Ri HSS#LfclWIEhash(R}0, tOUR^ry h 0W&£#tf>M<z>S£ 

Sign(s,l| |hash(R)) | | R^r Sts ^(ftig^ tEx-* IE 16 & # £ 41 X. , R fiftiJlE 

, hash(R)f2R <D - ft HC |fc 9 , Sign(s, 
l||hash(R))tt, 'fc8&#Lfclffli2hash(R)<Z>» BUlB^^i/ h 

[ !f#3f3 3 ] iiff *y h 7 ±tr*3^r, 7try h m&M%t <DJXfi 

^ 

Sign(s,l||hash(R)) | |r& £ ttGJ&mHk PT«l7 f -^ lEIftJtft:* ffl*. , 

( 2) &Sign(s f l| |hash(R) )lZ%$ttL , Jft&Sign(s,l| |hash(R) ) Ji, UtTfE^ 

fcKL Tf-/ is 9 ^WKS^L tz7'-9 , BP*>, Sign(s,l| |hash(R))i L Tff£J 
L > ^Kflaffiilfg** h 7 5 Sriii: TSdfSEf-^ry h ffiggV^ *s t° * -9 {z 
B'ML. ffifEfthash(R)tt, ^iiSft, ffi'&fr y V #*&&#*HJf#<B=» ^ f a 



(15) <&m2 00 3 -50 1 7 1 2 

'ilO > xV 9 J9 >\" f^ry h 0 

y h figfiff -f 5 is XT J* Xho t\ 

mjEiifff--t iim IfclB-CgMftS ti, ( i ) |[f2^^L, ( i i ) 

«(HE*nra»seifesrw-jju , ( i i i ) mmif5im&&&wifc&bm*&t>Mx7 



(17) #3e2 00 3 -50 1 7 1 2 

ffim2 -D'<-= -K Sign(s,l||hash(R))||R&£* % 

( l) R(i, mtl^'ry Y = rt(c^<7);gii£ 5 

9 > 3£t&cR £ , 

( 2) $CSign(s,l| |hash(R) ) dgsttL , K»Sign(s, 1 1 |hash(R) ) f± % Hufe^^ 

4 isfifrmzms tlt^f^ LTtHJ$ *U 

^(CHufSiiff N !7 Sriii: xm^f^rv Y IJlcay^-^ tear 
t, iWEIB:hash(R){i, -tixgf*\ 

irBE^^s/ h iMfiffOnyt'a-;? K*5^T» R <0 — #lRjB8#i L T 

»R»i, Aft IE ^ Y ?B»#© = >t°.r f*Uz*<D&m& , Aft IE 

( i ) 1 lH]BK#«#<Z>-#|6]g£|fc£flR&#<7)=i vt'a-^lcSD , (i i ) 
3 Be 11, mwf-'ry Y W7t%<r>^ , #*f+#Wa*SfllL % ( 

i i i ) 4 011:, ffilEgf&Lfcl*^fcS£W«£ifflfaiBifc#£ fr^^ 

( i ) i male, MBmK%<D^ is t° ^ ~? frb (Dmm&&m<D-jj 

SffL, ( i i ) 2|H]g(c: x ^^-^iS]^m*3«fcI>*iiAPtS#(c^^L, ( i i i 

) mmmzLtcmi rimmm*. wzm^mmt lx. m 

Xfertb-t 5 7*4 i/9 fr> *Y Tt , 
( i ) jffl3E5£aF*ti5«&aS*©5 t # , ( i i ) if3e^*gf*ti?«*W32L 



(19) 4#g2 003 -501712 

a — * fl»S> ituE^-y h 0>IiA#tf>^ >f a. — ^ ^^ry h £^1-5 

B&i2iH£*s> h 17 — * Sriic t\ frfE^*- y h JR5BA© = > t° a. — * frb , ffj 

*(-fi, B9f2££/.e8i »£>££&Jj!2 &&£fl-RI£-e\ 

iuffif-^^ h ©|fcA#© = Vfa-^^ffl^t, *S9 jv* — $ • t^Y \y 
-^©W^*Hft&fcrtK, ( i i ) B&E£±ftSil2 3E»fc#p ( i ) ffiEi&£& 

m%<Dk%, (i i ) mm%A%tfm^tz<Dk mz$±ftmi &&<o&m\z.£ <o 

t # , *S«t t>* (i i i ) 89 IE 8 2 £*£fci3«rti£*r*-<5>f''<>h • 

* &mu&±tem2 m&zmmz ( i i j s^Lfcjgi 

* ( i i i ) 89 SB & 2 £ft£i3»U:fT3 r. £ l:J:otSSL fcll JttfcL , 

8912 x-r W >v- f-Jry V ©^rS&ttPJBr* "TiigK-f5 , 

[ 19*^5 2 ] 3»*JS5 1 8EittO*fe{i*J^T, 89 IE 8 2 (B&teli* ME 



(21) #£2 003 -501712 

[ 0 0 0 1 ] 

i . %w<Dftm 

*5SWli, -j&fftt;:, if f ^ry h , if^-^y, Sf/h§Jf 

[ 0 0 0 2 ] 

fffo^w ^^^iiff^-y h v -? zmcxuzm*imx*hy , (i i ) *©»a 

SfS#{-«to-cmKW^«i3tE-c# % Mift(^£T-i!®&«rf£-e&9 % (i i i ) 

5) , ( i v) JKAgff fifcf, g£-e»AL, {£f£L, 

, (v) 2-D/-< — • n — K- 7t— 7-7 h ©U-f • ^^-^-vy 

LH#KS^l^ , Lfrh £±\zmmmx*h<9 , (vi ) rifitIL > 

*fcJ±ifoe)«*5 3SSIO*#©ft-Cttl EKOSttHL WF$ T(resistant), ( v 

1 i ) mztezxittm-zsmx'h'o , ( v i i i ) laeiEL, ( i x ) 

fe£ Ifi^&fr , (x) fc£Wfc#j&(tender)*fcM:A¥#*J (surrender 

)*< ©9 ^L^rtgs^ttgttML prtiT?fe«j , ( x i ) $Lnmz.m±te. 

[ 0 0 0 3 ] 

2 . ft3fe£fifr©iR0l 
2 . 1 

2.1.1 -$8.mt£mm 

^ttSJfcJ: tf^tt-tHMWOh y (transaction) jo it -5 

'i; fi^®f? I (electronic commerce) i£^$J#j!::ii;fc L T 0 Jh¥ (O'ilk 



(23) &m 003 -50 1 7 1 2 

[ 0 0 0 7 ] 

v Y mAtDtzftlzttifUzmLtz^^ -7- > ^Jf&ffit LTffJK &t>tlZ> 0 
ItKin and Josephine Martell; A PDF417 primer: A guide to understanding s 
econd generation bar codes and portable data files; Technical Report Mon 
ograph 8, Symbol Technologies ( 1 9 9 2 ^4 8) %&%k(DZ. t 0 £ tz „ AIM 
"triform Symbology Specification PDF147"<b &ffl(D~ t „ PPfi'JL tz 2 — D 
— =-Kl4, HX^L tZT-9 <D7 * ~)VY • Y Vy yx&lZ&fr, ft?4 f J9 

y KIT* ir^-fS - £ 
[ 0 0 0 8 ] 

2.1.2 <<>9—*yh-nryh&nmWr 

4*s9—*y Y • TlryY It, T 9 ir * m^tzit^r V (capability) 
[ 0 0 0 9 ] 

£ , xV v^/u- x^y h <D<7--s<t*V f-j it, fry Y ©£(9^ 



(25) #£2 003 -501712 

( 5) '&?^*-zm%r$x*mz-fz z t a , ^ispTtg^o 
( 6) ^m^san-e#^, ##jpii£& 6 

[0013] 

2.1.4 m^** yy^fcits «t 5 /iffi«!:li^< M( I B I ) 

<5 „ U. S. Postal Service; Information Based Indicia Program (IBIP) New T 
echnology Metering Devices( 1 9 9 5 ^5 8 ) t 0 I B I fcftli, 

£ <D @ ftOfcftf^ x> /uS^SSrii/a — K L = — K ( PDF 

4 17) ^ffl^tl^o U. S. Postal Service; Information Based Indicia P 
rogram (IBIP) Indicia Specif ication( 1 996^7^) £ # <£> r i; „ $.1t 
, Stuart Itkin and Josephine Martell; A PDF417 primer: A guide to unders 
tanding second generation bar codes and portable data files; Technical R 
eport Monograph 8, Symbol Technologies ( 1 9 9 2 f4^) t> #Bg0>r. t „ 
[0014] 

ft ©£«5tt?SrfliffiiJ1-S ' t &XZ tetftittttb tz\,\ Z<Dtz#>, Sffl-tr^a. V X 

^ . x^-r * (psd) *sffl^p> nsr t Kfcs. r *u*, #a*-fedF-a7- = 

[0015] 



(27) ®m2 00 3 -50 1 7 1 2 

[0019] 

2 . 2 Jl-fttt&i¥& 

2.2. l r^y- if-^lcr* ir*-f 5 • ^-—f\cMi-6±^r=V t 

*%Wt mm<DfoZ> '&&&ffi\Z y *V y * ^T'J-HMountain Viewtf)Axent Tec 
honolcgies, Inc. [ " Axenf ' ] <D s if — /<\ZT {7 ±* "f <5 K • a. — if 

^-fedr^ y x^r y^rAJij; t>*Mo n D ^fo5 o - tf)&flf /J*#Sic§§ig$l 

i^oii, Hi i?--^jsg£3c±f;:f&sij-c# , ^Ltt©i!<) simxhtitf 

[ 0 0 2 0 ] 

5. «TOi4 ^7^7 7fii, B£^Hb4, T p< -y-fe-v^^SE^-K J hsRxen 
[ 0 0 2 1 ] 

Axentttfi, Bff-i-fbf^y h ©£j#*i«fc l/MfC jol^T, ^tf> "Web Defender" 

y 7 1> $ ^TizmjEte&mz-s-z-z <dv. a— if ttdk^ra^sfc^a ^ 

[ 0 0 2 2 ] 

MtC&l^irte, Web Defender!*, * 4» W ^ il 5> ^ 

[ 0 0 2 3 ] 

Web Def enderfi , ±$$<7)7 7 J $ * — /U<£> ?| t& iC ?t ^ > Microsoft Corporat 
ion (Redmond, Washington) 7^ b <D Internet Information Server ( I I S ) £ jfe 



(29) 00 3 -50 1 7 1 2 

2.2.2 MtfiKOftlff 

Xerox Corporation (Stamford, Connecticut) i-ItiSg £ tlfcstefik, etal.GD 

) ^iffi-rV is?*- 9 (workjroflS^fc'J: I>*fgffl£$? „ *@#fFi?5 , 7 1 

5 , 4 0 3 -£Hi % SYSTEM FOR CONTROLLING THE DISTRIBUTION AMD USE OF DIGIT 
AL WORKS HAVING ATTACHED USAGE RIGHTS WHERE THE USAGE RIGHTS ARE DEFINE 
D BY A USAGE RIGHTS GRAMMAR( ffiffl** fefflttXfefc «fc O Tfcfc-fiB »£K , 

{£fflti^3fstt£ ftfcx-r v^/u- roil^&J; 1>*{£/E£ '^fi) 

*S#f*i!5 , 6 3 8, 4 4 3 -^li, a SYSTEM FOR CONTROLLING T 
HE DISTRIBUTION AND USE OF COMPOSITE DIGITAL WORKS ( |ff-f V ! ^^' 17 — 

* vmmi$x.x}tiim*:mmirzi'x t rj*) *n#rF3i5 , 6 3 4, 

0 1 2 Tj-li, a SYSTEM FOR CONTROLLING THE DISTRIBUTION AND USE OF DIGITAL 
WORKS HAVING A FEE REPORTING MECHANISM( 'Pr&U^W.^*: W"t"-5 *S 9 1^ 

5, 629, 9 8 0 a SYSTEM FOR CONTROLLING THE DISTRIBUTION AND US 

E OF DIGITAL WORKS( 7*4 *J $ )V • V —<? tf>ifi*j*J«fc Xf f£ ffl £ $J #P 1" -5 ^fA 
) ftfcfc o *3Dfc#KKk ^3*15 L fe, "SYSTEM FOR 

CONTROLLING THE DISTRIBUTION AND USE OF DIGITAL WORKS USING DIGITAL TICK 
ETS»( TMv^/W fry h fcffl^fcx^ v^/U- !7 COil^^J: t>*^ffl^$IJ 

W^Sf*^) t ffiigfjlo 8 /3 4 4 , 7 6 0 ^fi, ttcmtt LX% 

[ 0 0 2 7 ] 

-ixf>©4*iffi, ilifftLT, A«ii^5/h !7-^±*5j:t/rixS:ii 

tLb *>lt5 r ff^U/Jf^h y j (trusted repositories) (D It , 

its pr^^fco , mc^^yh [z-o^xxz x.t> , ±x(of-^ry h tfmz%ft7i 



(31) #3c2 003 -501712 

[ 0 0 3 1 J 

or, fli^-t^y ?v • ? ? ^cnistfi/Y y it, ; en^^>^±^-^±-c*^g 
ujKv^h y an x.-c\ ujK^h y ©aatui, 74 v — 

^©7^ -fe^t §It5 0 7nytf. x-f**, CD-ROM, 33 J; t>* 
v?h y (4, ft H^^^v'^xAfdli, izfe&T? -frfcl*. tH 

f-Sr^-t-Sr. t li'fci^i «IE«r. <b iiX*#^i\ «!itll#tt, fflf#«:tt* 
l*Ztilz{tilfi-Z) 0 Lfc^oT, =if — • ^7 A littS©r-^ * = - t 

5^t^-e#5„ r 0= ^— rasa, jaiSa^^a-^tisbnsKm^. 

[ 0 0 3 2 ] 

l-l-x.fi, i§ (4, r 5^£o<j r £ fcJ:o-cu#$?h y SrffiiJitcSB 



(33) ft&2 003-501712 

fo&M(D Misted Xfih 7 s-f? v-a U^yhU ist^wt^a y x-f • £ 

[ 0 0 3 6 ] 

fc5 0 fcSVMi, «^WIIJ6^S|{±, #^ffl^*QIUgg( AS I C) xy 
[ 0 0 3 7 ] 

•>*xa, * O y ? , *s«tr/^«BJ'r^^-7x— ^*^tf e 
[ 0 0 3 8 ] 

= r- y • -x-t-^ii, y -rs i m<ommfrt>f& 

Z>o = T • i/^yh y • x-fc-* 14, -fey >BBMh 7 ^if* >a ^£^tf c 
act-t^tt, xV x^h £T #7L1"S J BSfcffl^SSStt 

x^-y h • , jo X TfteW-tatE (authorization specification)^^ 

M-f-Z frfefotem-t—^h ^tr 0 xV f J9 /u- xxy h *5«fc t>*^IB(i, xV 

hy • ^-t'^K^-f 5<Df4, «»OB6giJSIE*-Cifo5w t SrlELT*J< . u 
[0039] 

-JL{£ffltlKoi>T\ r CD yjxtJrlC jo It5 'M (variant) 14, fji/tfr- 
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u^^h y izfemi-zm-kizi-i^ y h z±z *<5 -cii^^o 

[ 0 0 4 4 ] 

2.2.3 iRfflx-f v?;? /U- f-^ry |>©7U — J»V 

NTT Information and Communication Systems Labs<£>Kb Fu j imura^o X l^Yoshi 
aki Nakjimali, 7*4 i?f /U- f-jry h *aA/T?^5 0 Fujimuraftfi, If 

v=^^- f^ry h <0#M8&|*oT^5. r. (2 = ^X** h T?f4, 7" -fry h tt % ^ 

ftlzXiX, f^ryHi, m-cD3-tr-y h ( lw*3t^-C#» 

[0045] 

Fujimuraftli, tUM^tryh' 7^-A7-^i > <0»-£|SJfe= * h ^ i& 

t?s>5. -mt-fz> z. t wot, *ttjfcfc#fiaL , y 

(bundling) ^Wim <D 7 4 (feature)^ *imt -ft* CI t 5 . Wt, % 

n/fim-V--V X ^l&tttfv f * • if — If* (deposit box service) <D£ 5 

o 

[ 0 0 4 6 ] 

s;r ( 2 ) i-fryh <Dm*<Dt±m*t mumm^mi a, 

/c(if--f^wg}-tML?rSjig[c1-5o (3) aEiiLTi>5 W{ciiffi*J^fk-f5 
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2.2.4 XML f^ry H : -ML/irV i s9^' Y Mff§ 

0*mfQ'^fS( NTT) ti>9c5M\Z±^XftmL , r XMLf-^y h J £ 

-)Sft<i:7*-v ! yh©^i;^;U. f-$ry h # {5J £ if # 

[ 0 0 5 1 ] 

NTT Information Sharing Platform Laboratories^" Ko Fujimura, Yoshiaki 
Nakajima, fcj; t>*Jun Sekinefi, U — • 17 -f K • ^ B 1g ±1%X* Rli^ 

SiS^T^S. TJisfJl" ^ir-y^^., o-<^p< >h (micropayment) 

[ 0 0 5 2 ] 

Z<Dtz&b, Fujimura, Nakaj imafc J: T>*SekineGD E.S: It , fo h <4>& S^<7)$iflJ&- 

^SSE ft , V7h ^xr - 5^ty^, !)y — * • 7? -ir* • f-fryh 
, -f -<>h • xx>;/ h , ttSflft^^ry h *if &"£tr. #ii©^^rs/ h 
A^^Tl*/il|fflfr^/^ xx-.y h £ijftil£ fcfetc:, &<b ttiftffl 
xVv^/U- f^yh • 7U-i!7-^0<f , T? ( f-tryh S f£ivlfi££ tit 1^5 
E£tfc, ^te^Tffett, *i«fc tfgttMLTJ&cDJ; 5 ftxxs> h • 7°o^x^&, X 
ML Kl£<5< -i&ffcxx-y h £i£ § ffl^T r. t Wot, H 

£M£ i Ir^^LT^So 

[ 0 0 5 3 ] 

L##S>, Fujimura, Nakajimafc J: t>*Sekine<£> Zft fi % J^TWSS <£>fc #> Id — /& 
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□2 L X jo < o 

[ 0 0 6 0 ] 

l 0 0 6 1 ] 
[0062] 

[ 0 0 6 3 ] 

-r (facility) l£#JfcLfc!*ixtffckfcl\ ifUcfi, *y y << y iiitf-:* y t • 
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1 0 0 6 9 ] 

( 5) mm MW tf-fe**. V 7-4 0 x ml tehb »3>3«?igffc7 f -* £ 

o 

[ 0 0 7 0 ] 

R. D. Brown, "Digital Signatures for XML", IETF Internet Draft, Januar 
y 1999; K. Fujimura and Y. Nakajima, "General -purpose Digital Ticket Fram 
ework", 3rd USENIX Workshop on Electronic Commerce, August 1998, pp. 177- 
186 ( <http://www 

.usenix.org/publications/library/proceedings/ec98/ fuj im 
ura. html. ttitiRJ-fetDK. Fujimura, Hiroshi Kun 

o, Masayuki Terada, Kazuo Matsuyama, Yasunao Mizuno and J. Sekine, "Digit 
al Ticket Controlled Digital Ticket Circulation", Y. Nakajima and K. Fuj 
imura, M tH^.<D !^.^»The XML Ticket Specification"^ #fi?.<£>^I t 0 £ /c, XML 
Schema Requirements, The World Wide Web Consortium, Note, February 1999 
( <http://www.w3.org/TR/N0TE-xml-schema-req>§r #23) t> ^M<DZ t Q 
[ 0 0 7 1 ] 

[ 0 0 7 2 ] 

2.3 f^f A'H^ 
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Hz.X&< r t **]fet "TSo 74 *9 7Tv M4 % ( i v ) #i§LTl8A 

ft**!* • 7 f /<>r^^jB3ci-5 0 r ommmmxit. 74^9^- 7^yb\± 

, (v) gc^lcfelftL , fc 5 #@?( f^y h #ft#J£iaff£ tbfci: # 

f-ff)£L, 7tr-yh frmA£titzk$\z®:j£LtcfoZ>W&, 

tiSBS, v^yi- f-^ry ht, (vi ) HfJp.< , $£lz, *LT£ffl£ri>tf 

[ 0 0 7 6 ] 

1. *^0J(dct 5 7=^ v^/U- h (DffaW 

^fijc, tea, &zxf#m*&&-eib*) . mmtftxho , 

o 

[ 0 0 7 7 ] 

mz. s 74^9 >v> f-fry b <d~<d£? ttUfttt, 75-y b MA%<D*y b 9 
-?mm=>yt°~-t rtfcfc^Tdfc/fcU ftH±3l^ittT*&i\ r©J:5*ff» 

^iS^) applets J: o-CtgipttK 3ia-t5 - £ 5 „ (f-^yM»A#© 

"bftv\ ) 74&9>\" 7>ry b ©J8Afc , £2H> , *S©ft«0>*y h!7 
iift*±< fffcft^. LfctfoT, 74V9A'' 7>r>y b <DMA\t. i§S, 

[ 0 0 7 8 ] 

74i?fi/i" 7- try b (DffiAlt, hh *3>5 ^^WfciW to&h (bJC <±B£Xfo 

-fre>*il\ j£;t-c:fe< &gfc£^ 0 
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• =3->ry V <d±*zl!) -r^r !4, tKO&g&r x £fc <&#-fr-f , Bfff-I^ft 
#-T5c W&fcfw f^y h Srf^JftWt-f^filc-rs r t (4. HBBlc: tt^F «T 

IStc#Fb1W -jJtin<D£* iZ&^XBmZ ft 3 tff#«4flf jlt^S xV v 

^ y h Wi?^ y x>f (4, Bf-if-ftflftt-fe^a. y lzm^5< tz tfT?fc< 

[ 0 0 8 3 ] 

ftfc^-fft^i o©l!iSfcii>f^h lc:o^Tf4gttj§i£ ft3 0 ^ra&ftxV * 
[ 0 0 8 4 ] 

^•^^ x^ h (4^aiw^£ti$ tu, ttiftK B, = —9 tmwi 

-K T\ my*-?* - t \z£ otMtS ^ t Sr-^tp, ftM^ 

(4, P^SiJi^^y h t -tZ> AMXiz, mX^^yY t^^^Et ^ 

[ 0 0 8 5 ] 

#$S910>tV x-^ry h o«A*sJ: tfgttML (4, x-^y MKA#/tB 

s/h&tLAIfflC SitML A*3J: tf&&Am^ftri»3: fcfiZK^tt, f^y h IiA 
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git JUL £: fcBBttlTSr. ti>X*ZZ> 0 *%W<Dt*J f-^ryhfi, i§&& 

, ft*? 9 ^Plti-efcSo LTt^'oT, "Doctor Jones"©^ y fc°a ±|:j|o T 
f££^tj\ r Dr. Jonesll^'-h E 3 C2 : 2 2 P MfCA9 , ^Jffijfif #4 3 L 

[ 0 0 8 9 ] 

*i^©r^^^/v- f^ryMl, #«tt^*>-5. 

V\ ±IE#BS) o 

[ 0 0 9 0 ] 
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-l^ii^y h £$3i£--©llffl6«j:frifci:ft.&. 
[ 0 0 9 5 ] 

KifelftLftttfttfft&ft^. Zti^ti* ^tryhmA^l*. ^>t°^-^- 7°y 
^ , 7^ • K7^1 — h ■ ij—b' - y 4 $ ZffifiL TW/i 

ttix.'i'ft^ fti> 0 

[ 0 0 9 6 ] 

, h (iBtA#^pngiJi- < 5 ©f, flfi!*ft*MRKiB^1\ fete 

5«ifiJt IrIi: J: 5 f-Mf-liJI;ift^}§-£>k &£*1-3 fcffi#*ft 

[ 0 0 9 7 ] 

i^Sc0p o pa*5j; V&atg^ Iwtt, (i ) =>^t 0 ^-*, #£L<(i, ^yh?- 

* • =i >t°^ , fcj; tf( i i ) v^/u- x^ h • y Sfc -jRW 

Ktt, ?fe«y -^tf&I^ftSo li^t5^>F ©*§Bf*fcli-t 

^T(±, $-©nyf a ^y ii^-TSffJItt^U^ (serial reli 

ability element),*: liftfcftl^j&S, £ A/ A,#fc $ tilt 4 b — WffiigftA^ 
ill^oT^5i:||©f;)!)|;, 7 = — /u- -fe— 7 <7>g##£-f -5 W&h fe5 
o 5 ( i ) = a tsj: ( i i ) y • ^-K^iril, ii'&ff 

aftf-^-y h ^^7°y y^?i;u^/i^; <b , is£ vm+Am 
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[0100] 

*7is3 >t L TiiADftfC, flajjfctf, (i i ) ?ISt07^f>7^ 
, (i i i ) f<r^S:*)()N^F, *3j:tfA»#ft, fcitT/S^H: 
(i v) £&^ ! &H&4§-£\ f^ry h Jft^CSit l^p «t 5 4flfe© 

«( i i ) - ( i v ) (D^-Ttih , »R fc*a*fcif , 8cR fit, ( i ) 
I 0 l 0 l ] 

^^#0= &R ©-#161118, fiP*>,hash(R) 

o£9 h(R)^l+»-rs„ r ro-#|pjBBg[{4 s 7c©jRRSrhash(R)^t>*aji-5r: 

hash(R)te, 2^fs'^iLfcJfefr», EP*>, ^%2%^m\ k SLtftZblfi 
[0102] 

ft Id, r. OffjlLfchashUUSr, fry h flUf#©=» ^tTa h 

®ff^^£i§CT?f&i2Hf-f5„ 1t«2( i i ) 
-(i v) Ol^f tL^Wj: o ft, feM(D3- fry Y 3§£x-* hash(R)(D^2 
Sift ^ <b #T-# , -Jftiai-tS LT^5. £T<£>fi!2 i£{f fi, f^rj/HR 

«t ? ft, SSL, EP*>, -fedr^T- y ^ 

£ 0>^#!&£-eite5. 0»J;itf, tyh- "f^y h <Dtzib(D^<Ty b £, 
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d <7)»sign(s,l| |hash(R)) | |Rt£, i§5&, - K H 

Xmi&Ztl, m^^ix6 0 PDF4 1 7J3J; tfQRZfti^-^-FI^ffS 

L \,\ 

[0107] 

f-^y h yfa li, gfcLfcttSU gp^, Sign( S> l| |hash(R)) 

) *5J: 0*l&^LT;fe6tif$&( BP*) % R) ZK^fcx-f v^A- f^ry h £ft£L 
, *l>t*:O^Lfcfr^^^' f ^7 F Sign (s , 1 1 | hash (R) ) | | R&" $ii i£ "I ft 

[0108] 

tLTU^. 2 o o o T*(3\ :tit,©f^V^ioJ;t/troj|*[i 

[0109] 

ISISj&fttt, «FStf>8te LT, rg»#W=> ^ t° a fc J: o T PPJ&iJ-f-S r i # 
#£Li\ Strops/ Mi, (i ) -*7c^-3-K, *5«fc tfa-^fa Lt 
( i i ) fcitJt/itlJ^yh tL^^^" 

«, 3EK( M i ) #7°'>a Ltlif^J:? fc, -T^^MfcJ; t>*1#^(D 

&<0£llijFS:&?j*L fcj§£\ Hof^7M:i±( i i ) r. 8tr& Pn*J1-5 r. t ifi 

fi\ (i ) f^yF ^IffltS^'Oh ^lUi/^^^tSi^, fcJ:t>V 

i i ) ^-?ftfr<nmA%tz\*y)v-7tfT^t£§Lm, mmttcitm/®. 

&/&?><&xx:y h &±3RLT^S®£\ ^TfflT?*><5 t « i i: ^-e#5 e MM 
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v £ffll^Tsign(s,l| |hash(R))&#S2L , 1 1 |hash(R) ( Z iXJ±, 
tU$ttJ:p ±< @| , m^i :fc«fc iAiash(R)©fi*£fr-frK:ia#*fc 

cot Pli:-*i^Ba«:S:ffl^T, »ffc/jihash(R)**ffc{itf3li-5. #KLfchash( 
R)**rfcfc( ^) ff»L fchash(R)i: Jt«1"5. 
[0112] 

H^®o fcsign(s,l| |hash(R)) | |r*S % ( 1 ) sign(s,l| |hash(R))8B#te*5V^ 
t, -^;Hjia«v «l;J:ot)»I$ fixi\ |hash(R)*s#5> 
i i ) 8?SELfchash(R)^fffc^( ?*) tf|fLfchash(R)^^LV^4i^, f-f ^ 

^^s/ h i$nmx&z 0 wh, (i ) *st*fcii(2) itmztk&Ltzm 

[0113] 

3K#<B&#£j«fc"t-#£\ IP*,, v^A'&IiEifv |hash(R)&ft 
S»K* s fT*?ix, frfct-( H) ff-£Lfchash<R)#, ^©^^*sj: trr 

Srot PIC fifctfL v^»-a\ h fiiijEft-i'-Oh ( I \z.3l otll$ ^5 

) <Dtzfr(Oh ©lcit^^< , h #1*40 Kir. ©J: 5 fcii^£ tilt<nt> 

v Y #fc*Dl£-t<DJ: 9 tc-El-JI/T^ *ifc©-CJ4/i^li^, <f4*J9fr- 'fry 
3. tVv^/I" ^--jry H 

^ry h «:Efti-5 v/^xA^*36WSrft^t-f5. rojUiT'fi, # ~> * x A © 
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[0117] 

4 . is $ /U - =f- >T y Y 

5SWSr#t«cYb-f So **WO^<DSg«lcio^T, 7^f f-^-yh rt^iESfc 

(75 =2 yfy; leases ©a^oi^-cs&i-a 0 

[0118] 

^■^^ f^yhli, Sign(s.l||hash(R))||RS:'&tf^r?K(6i^^^7 f -^ 
IBl&j&ftrtK^ttffcS *l % ( i ) R(i 4 f^ryh i9t©S?Boa»T?*)D > ( 
i i ) hash(R)(iR 0>— ;frfilB8grC*fc3 »"Cfe«J , ( i i i ) 1 1 |hash(R) ti, f- 

^•yh ^w-rs^r^^h ( ztzamm) Kig-*-3ffi«i©, hash(R)£ ©s&fl-sp*, 

*a*-£fr-£-?fc0 , ( i v ) sign(s,l||hash(R))tt, =f-^yb fly&3£#£>8H6<7> 
^£g£s <b i| |hash(R)t tf> -fr£x-r v** /U^^L Bt-f-fkL fcfc <£>T-fc>3 

, (v) Sign(s,l| |hash(R)) | |Rfir (DxV v** R £^ttL tzt> <D 

[0119] 

. ( i ) f^y h «lfff)^ >t°^-^ , i i ) h Kf^#ro=i 

fifK:, Sign(s,l| |hash(R) ) | |r£ ^M^fgjil T^fli?*-* !Etg&#l*l K 
[0120] 

<fo S o 

IB2 id, R W-^lpJlSgc, BP*>R iCoi^TtfSJLfc^y , <5 tthash (R 
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[0126] 
[0127] 

7 * ^(O-SflSfcte^aJSrfcg-rs^-ck , (i ) f^yhfiff^yf 

» — * OiSLS( flff^O$lc:*5^5R ) . i i ) f^->M^f©nyt° 

[0128] 

o 

[0129] 

•9 , iff^ i- . &#Hc, %L&fcT? -tx-fzzk y 7- 

[0130] 
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[0135] 

S Sign(s f l| |hash(R)} I |r!CO^X1^|^L , Z (Or* i?f f^yh*^ 
LT, 9^**?<T>i.o «tf)/f £{i#LTff# , r-f /W- ^-jry h # IE SIM 

[0136] 

- t It. v?* f^ry h fi, ^ y T • x=*r* V t/jjot^ 

-5§-<t£ *LTi^3it£\ «^#roii£-i§-«£3Jfl-r<5 r <t iaoTE*,i;^ y r • r- 

[0137] 

<0 . ££T-fi&V\ fr' f^F Wir^r^y li, Sign{s,l| |hash(R 

) ) | | Rid *3 ft 5 , 3B£g£jBs fcffll^fc, hash(R):Jo«fc tfl ^©fr^M'i* 
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I 0 1 4 2 ] 

t WffeS, ( i ) l ESI:, 7->ry K £>I8A#l-<fcoTgn (cr 1 m g i^f^t, 

ntz^mmwii t m~£tiz$Lm(D^*j&mmk itm, rkh i ) 20 

4: LT%£L, ^^T-( i i i ) 3 Egd, &3 fc, £< 8&fl-f5 
H wfliA#ldj; otMtS. ^fli, ii^xy ^( i ) -( i i i 

[0143] 

o 

[0144] 

, ( i i ) r §£Lfcx-*j <D&mt$£Tfffim^j&*hLtzm&. nrvh 
[0145] 

ti<b fed; 0<*<z> <&©!»#*$«]: tfJRtttt, WT^MJoJ; U^ttL fc 



(65) 
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[0149] 
[0150] 

r <Dwm-&iz&i^x , w&gtez mm<D±xzv --fu -c&sl x 

1 o, £ fcliit^ifi^ o©£/j:5ffl2§t; fcl±iaizli&# MS tar t it 

fc«t tf#3S0i©iSfe|>£ 3K;fr©J£A?£|J&£-r5 r t tft> fritz, Lfc 
#oT, £&<Dftt>9 <D£ffi%i&tfLXhZ> 0 
[0151] 

2. iKSrfflv^fcx-r /u- f^-^h 
y a. -->3 ' 

[0152] 

kmzm&mz, SA/f^^ h uttt-^i^i tiit^o max. m \zl 



f-^ry h 3 <D||3 CDC D -R O M © £ JSfe 710 fll li % iBM^-— i£ 
*>ifi4CD — R O M K y 4 -7*£^L Tl^ft Ittbtfft fcl^o ) 

? u-i/y H • %-b* (Db y^-tft*/* XAJ;? 4, & ill ft ft £ ft 
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tub, r ©SftKte^^ft-cfc^. 

[0156] 

^LTI!:, hash(- P$tT*fc5 r. t * 

L<, fKRiOhaah(R.)Wt, R i 2 fl»f> ^ffrfc&iffL T*50 , 7c£;Ll7ctt 

iCSHAi&J; tfMD5 {4^^aLT*J9 > #£LV\ ^. (Dtftt. L ^fi^SS^tt^^T 

* &TT?l|-f3. La»Lft#e> % IT©ir6, h O-t* * 

[0157] 

( 3 ) ^^5/ h • f-'-^/flR^^H, ( i ) hZ^m&mttL , ( i i ) TV 
S^^g^fcs £ffll^T, g{fLfchash{R)*5«fctfifcttLfcre«I i-^LTsig 
n(s,l| |hash(R))t L , ( i i i ) ^ <DWr& L fcf-^ fi:£ , ft £ x W v 5 ^ /UjI 
flT*s> h7-n TiBMfcjg&l-So ( - - x (4, f^y h • If- 

ctoT, *£sign<x)j5»e>Sm-e#5iffi£-t-<5 0 tftHEfcv , ^LT^ilti 
£§ts tC*f^1-§ 7i\,*\) X^t N SUIT LJ&»L*#e>, f-^ryhiH 

(s,l| |hash(R))^^j7)ci-5 ^^LTl^ftV^ ) 

, r hash(R)©S*-CfeoytftCRS:8Sf4"t- 
3„ ( xxy h • x-^/JSsS^fCf*- OR #*LTiI&£ *u1\ Lfc< T 
h . ^4x£iI£T't £ SrS^fflS fifcv*. ) fisign(s,i| |hash(R)) | |Rf4 

[0158] 
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ziifc5t'<-= -K (2, PDF4 l 7*fcttQRSttl:J:ixtf, 3E!w-JB#*L 
[0163] 

tzt dlftoiSSr^Tp 3. * Kit -tat OttHt fc^„ (roij fcjftft©±38 
OjE ii^ig-t? t L-C^ -5 So ) La»Lfcase> % f^^h 

[0164] 

2. 1 ?4 7s ? fcj; o?* -r — h • # -K ^ffli/^fcxV >w h 
Hi f^Lfc^H^cDxV S^u- f^yh 1 <0ftJByfc«fc5£Jfe^l&K(fc#$ 

D-ROM, DVD, fed: t>**^-h • *-K ( H^-tt-f) &£tf, ^ic^flllO 
[0165] 

* — h • # — K £ tV *s9 f-^ry h • 3>ftiLtfflv^:i!:J;!J 
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[0172] 

2 . IMIigi^-rA 

2 . 1 *#S5SE= — K 

frit tztemmm^f- try v *%l\i&z> 0 m&&t*="-h* ^ytxe 
fty-h ^^^-t-^^-^i^, : tif, -k i^itts : n tt i 5 o 

[0173] 

[0174] 

2.2 E T M 

& ft Wiry b Wfs's^T-h.K 2 0 0 0 ¥i) fcE T MflSfcS ( <http://www. 
etm.com/>) 0 E TMIJ*t^^ SrlSi f5. (it^p^ 1*3 
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3o<fc Xf Liberty Production, " <http:/ /www. autoshowusa.com/> ',Z 3ol/>T ^ThE 
ft* — jtf^&ififliL-CSS!) , «P> x y-tf-'T h ^ ib international Au 

to showicffl^s r. t 5 * -^Sr^t t^5 0 

[0178] 

■fr, r <r>9 -^^^Rl«iJ-r5 0 ^rwfe*, ^— rfi, filJBiJL fc* -^y^Hot 

[0179] 
2 . 5 «^/h§J# 

t In] $i "C &> <5 o B. Clifford Neuman and Gennady Medvinsky; Requirements for 
network payment: The netcheque perspective; in Proceedings of IEEE COMP 
CON'95 ( March 1995&&M<DZ t , tr—s<W X -T fix Xx >y * • 7 

ft&xx y * (C(4 % 5 0"C\ Neuman*5«fc l>*Medvinskyti 

[0180] 

2 . 6 x^y h . y?—? 

Fujimura jo«t t^Naka j imafi , li^xxs/ b to£ W -/Ky©f-^ • oi^n 
— xV yy^ftZWi&L ft„ ®Lb\t, XML ^ll^tf-^iy^-KtS^ 

#$8Wfce£L, 2 i\*m7*.&t>-&xm^z r. t ^t-# -So ^ ©wans ©is wo 

[0181] 

3 . © £ 5, 3. |H ^ 
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%3:<Ds<7 7t -*x*hz> (k = i'Ni t*fe5:Hs^m^feH 0 m^. 
s h pss ( r , m) ez N-?r^^-t-6 0 -f-a t . mnt mm. w^n* =t ( 

y ) =y " mod NkteZ> 0 ^lEfiMf- MMXh 5 „ fai&ftk, MOtfff] 

y £ ^^{c Sffg f5:i^f#f, #5 ^ <!: £ $#T* # ft 

kT*fc<5 0 ^tlT't , &lEli, 1 IhIOR S ABf-JHb&J; tffafc fr(D^y i/^>f<D 
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i±3SL-c^5o Sfj^^J;^^, ^laajm^^^ ^^i/^iCfi, RSA7 
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x*(i, ^ y -fe-^M^j: rj»*o#*x &i£flri-3 , # i m | + | 

l^t-ft3Stt*f-*y * t5. ir^^y • /^7^^k=1 0 2 4 - 
ro*§JJ;fritti\ 3-f+k h <^££<f1-5c<t IlioT, Wttfn=7 6 7 b: 
•y h *-C©^ y -t-isZmm-fZ) Z t ^T'#5t ±*&1rZ> 0 * y — 
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wOteroajRrortgw:* r^tsiaot, ^£ft<5 t , ^rft 

SISATrfc-S , Regents of the University of California!- «t o X #4-$ ft5 

O 
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fttf, 4^5 Y ±X^^r-yh tWIAL iEfi-rs r <!r #T-# -5 

^•r^ ir^ pjfgtt, feet TOv^-f $ <DfflX'm8[<Ds<7 isxtfmb ft 5 t mm-t 
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03 tt. **^ia5T'f> ! ^/l/- f^yh ©13 ©CD-ROM©OTl 
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04 14, Uttttfcajg©^*-;? h frKD-fu^Tj *7Fi-'&%&Wi(D&l T?*>9 

b CiotSISti ©KSLfcfc 0>T?*>«5„ 
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06 (4, 7^ ;W f^-> h & tfc fctf>©;fc3§BJlCj; S^nh^ /Utolgt 
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